CyberRota Analysis
AI-GeneratedOpenSSL versions prior to 1.4.0 are vulnerable to a sandbox bypass that allows attackers to leverage the pathlib and io modules to access and manipulate arbitrary files, circumventing existing file access restrictions. This vulnerability poses a significant risk as it can lead to unauthorized data exposure or manipulation. Organizations using affected versions of OpenSSL should prioritize immediate updates to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
openssl_encrypt versions before 1.4.0 contain a sandbox bypass vulnerability where the plugin sandbox fails to restrict alternative file access methods like pathlib.Path and io.open. Attackers can import pathlib or io modules to read and write arbitrary files, completely bypassing the restricted_open file access controls.
Related CVEs
Other vulnerabilities affecting the same vendor(s)