CVE:CVE-2022-0391
CNNVD:CNNVD-202202-864
Python是Python基金会的一套开源的、面向对象的程序设计语言。该语言具有可扩展、支持模块和包、支持多种平台等特点。
Python 存在注入漏洞，该漏洞允许攻击者输入精心设计的URL，导致注入攻击。以下产品及版本受到影响：3.10.0b1、3.9.5、3.8.11、3.7.11和3.6.14之前的Python版本。
solution:Upgrade python python to a higher version than 3.6.14,3.7.11,3.8.11,3.9.5,3.10.0:alpha1,3.10.0:alpha2,3.10.0:alpha3,3.10.0:alpha4,3.10.0:alpha5,3.10.0:alpha6,and avoid the version (,3.6.14),[3.7.0,3.7.11),[3.8.0,3.8.11),[3.9.0,3.9.5),3.10.0:alpha1,3.10.0:alpha2,3.10.0:alpha3,3.10.0:alpha4,3.10.0:alpha5,3.10.0:alpha6; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp hci to a higher version than -; Upgrade netapp management_services_for_element_software to a higher version than -; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade netapp solidfire,_enterprise_sds_&_hci_storage_node to a higher version than -; Upgrade netapp hci_compute_node to a higher version than -; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35; Upgrade oracle http_server to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle zfs_storage_appliance_kit to a higher version than 8.8,and avoid the version 8.8