CVE:CVE-2015-20107
CNNVD:CNNVD-202204-3354
Python是Python基金会的一套开源的、面向对象的程序设计语言。该语言具有可扩展、支持模块和包、支持多种平台等特点。
Python 3.10.4 版本及之前版本存在命令注入漏洞，该漏洞源于 mailcap 模块不会将转义字符添加到系统 mailcap 文件中发现的命令中。
solution:Upgrade python python to a higher version than 3.7.15,3.8.15,3.9.15,3.10.8,and avoid the version [3.7.0,3.7.15],[3.8.0,3.8.15],[3.9.0,3.9.15],[3.10.0,3.10.8); Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade fedoraproject fedora to a higher version than 35,36,37,and avoid the version 35,36,37