Vulnerability in Cocagne Pysrp
CVE-2021-4286
A vulnerability, which was classified as problematic, has been found in cocagne pysrp up to 1.0.16. This issue affects the function calculate_x of the file srp/_ctsrp.py. The manipulation leads to information exposure through discrepancy. Upgrading to version 1.0.17 is able to address this issue. The name of the patch is dba52642f5e95d3da7af1780561213ee6053195f. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216875.
EPSS: 0.007 (49.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 2.6 (Low). Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Cocagne Pysrp — versions 1.0.0, 1.0.1, 1.0.2
- Pysrp_project Pysrp
Weakness classification (CWE)
References
- cna@vuldb.com (technical-description, Third Party Advisory, vdb-entry)
- cna@vuldb.com (signature, permissions-required, Third Party Advisory)
- cna@vuldb.com (issue-tracking, Patch, Third Party Advisory)
- cna@vuldb.com (Patch, Third Party Advisory, patch)
- cna@vuldb.com (Third Party Advisory, Release Notes, patch)
Frequently asked questions
- What is CVE-2021-4286?
- CVE-2021-4286 is a low-severity vulnerability in Cocagne Pysrp, classified under Observable Discrepancy. CVSS score: 2.6/10. Published 2022-12-27.
- How severe is CVE-2021-4286?
- Low severity. CVSS v3 base score is 2.6 out of 10.