Description

A use-after-free exists in Python through 3.9 via heappushpop in heapq.

Remediation

References

CVE-2022-48560

Related Vulnerabilities

WordPress Plugin Aspose Cloud eBook Generator Arbitrary File Download (1.0)

Oracle Application Server Other Vulnerability (CVE-2007-0286)

WordPress Plugin Real Estate Website Builder 'ajax_action' Parameter Cross-Site Scripting (0.1.0)

WordPress Plugin Nifty Newsletters (Formerly Sola Newsletters) Cross-Site Request Forgery (4.0.23)

WordPress Plugin Shortlinks by Pretty Links-Best WordPress Link Tracking Multiple Cross-Site Scripting and SQL Injection Vulnerabilities (1.5.2)

Severity

High

Classification

CVE-2022-48560 CWE-416 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities