0.01 Low
EPSS
Percentile
83.4%
It was discovered that the shutil module of python does not properly sanitize input when creating a zip file on Windows. An attacker could use this flaw to cause a denial of service or add unintended files to the generated archive.
bugzilla.redhat.com/show_bug.cgi?id=1631420
www.cve.org/CVERecord?id=CVE-2018-1000802 https://nvd.nist.gov/vuln/detail/CVE-2018-1000802