ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2019.0065
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2019-0065)
Resumen:	The remote host is missing an update for the 'python-marshmallow' package(s) announced via the MGASA-2019-0065 advisory.
Descripción:	Summary: The remote host is missing an update for the 'python-marshmallow' package(s) announced via the MGASA-2019-0065 advisory. Vulnerability Insight: In the marshmallow library before 2.15.1 for Python, the schema 'only' option treats an empty list as implying no 'only' option, which allows a request that was intended to expose no fields to instead expose all fields (if the schema is being filtered dynamically using the 'only' option, and there is a user role that produces an empty value for 'only') (CVE-2018-17175). Affected Software/OS: 'python-marshmallow' package(s) on Mageia 6. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-17175 https://github.com/marshmallow-code/marshmallow/issues/772 https://github.com/marshmallow-code/marshmallow/pull/777 https://github.com/marshmallow-code/marshmallow/pull/782
Copyright	Copyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.