A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2021-11-10T17:55:47

Updated: 2024-08-03T17:01:08.109Z

Reserved: 2021-06-01T00:00:00

Link: CVE-2021-3572

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-11-10T18:15:09.510

Modified: 2024-11-21T06:21:52.473

Link: CVE-2021-3572

cve-icon Redhat

Severity : Low

Publid Date: 2021-04-24T00:00:00Z

Links: CVE-2021-3572 - Bugzilla