CyberRota Analysis
AI-GeneratedThe vulnerability in RestrictedPython allows local parameters to shadow critical built-in functions like __getattr__ and _getitem_, potentially bypassing the access policies of embedding applications. This could lead to unauthorized access or manipulation of sensitive data within trusted environments. Organizations using versions prior to 8.3 should prioritize upgrading to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
RestrictedPython is a tool that helps to define a subset of the Python language which allows to provide a program input into a trusted environment. Prior to 8.3, check_function_argument_names() rejected protected guard hook names for regular, variadic, and keyword-only arguments but omitted positional-only arguments, allowing __getattr__, _getitem_, _write_, or _print_ to be shadowed by a local parameter and bypass the embedding application's access policy. This issue is fixed in version 8.3.