Catalogo CVE
CVE-2017-17522
jython: CVE-2017-17522
- Gravità
- Low
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 3.60% · Oct 22, 2026
Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. NOTE: a software maintainer indicates that exploitation is impossible because the code relies on subprocess.Popen and the default shell=False setting
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | jython | sid | 2.7.3+repack1-1 | vulnerable |
| Debian | jython | forky | 2.7.3+repack1-1 | vulnerable |
| Debian | jython | trixie | 2.7.3+repack1-1 | vulnerable |
| Debian | jython | bookworm | 2.7.3+repack1-1 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | jython | source | sid | (unfixed) | unimportant | Not reported | Not reported |
| Debian | jython | source | forky | (unfixed) | unimportant | Not reported | Not reported |
| Debian | jython | source | trixie | (unfixed) | unimportant | Not reported | Not reported |
| Debian | jython | source | bookworm | (unfixed) | unimportant | Not reported | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [jython]Interessata
Dettagli (2)
2.7.3+repack1-1· all · bookwormInteressata
dsa · jython · debian · bookworm; dsa · jython · debian · 12
2.7.3+repack1-1· all · bookwormInteressata
dsa · jython · debian · bookworm; dsa · jython · debian · 12
- [jython-doc]Interessata
Pacchetto sorgente: [jython]
Dettagli (2)
2.7.3+repack1-1· all · bookwormInteressata
dsa · jython · debian · bookworm; dsa · jython · debian · 12
2.7.3+repack1-1· all · bookwormInteressata
dsa · jython · debian · bookworm; dsa · jython · debian · 12
[Debian 13 (Trixie)]
- [jython]Interessata
Dettagli (2)
2.7.3+repack1-1· all · trixieInteressata
dsa · jython · debian · 13
2.7.3+repack1-1· all · trixieInteressata
dsa · jython · debian · 13
- [jython-doc]Interessata
Pacchetto sorgente: [jython]
Dettagli (2)
2.7.3+repack1-1· all · trixieInteressata
dsa · jython · debian · 13
2.7.3+repack1-1· all · trixieInteressata
dsa · jython · debian · 13
Osservato: