NVD disclosure day

Published threat advisories for July 17, 2020

CVE-2020-15801

Python 3.8.4 Path Restrictions Ignored Allowing Arbitrary Code Load.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability exists in Python 3.8.4 where security restrictions meant to control code loading from specific locations are ignored, potentially allowing code from arbitrary locations to be executed. This could enable attackers to load and run unintended code, compromising system integrity if they can influence the re

NVD modified: NVD date unavailable

CVE advisoryKnown Exploit

CVE-2020-11978

Apache Airflow Command Injection Vulnerability

Halo Surface Signal: 3 out of 5 — possibly public-facing.

A vulnerability in Apache Airflow's example DAGs allows authenticated users to run arbitrary commands. This could impact systems by enabling unauthorized command execution, potentially compromising data and operational integrity. Organizations are advised to disable example DAGs or update Apache Airflow.

NVD modified: NVD date unavailable • CISA KEV