Test ID:	1.3.6.1.4.1.25623.1.0.171228
Category:	General
Title:	Python Untrusted Search Path Vulnerability (Feb 2025) - Windows
Summary:	Python is prone to an untrusted search path vulnerability; in the mimetypes standard library.
Description:	Summary: Python is prone to an untrusted search path vulnerability in the mimetypes standard library. Vulnerability Insight: There is a defect in the CPython standard library module 'mimetypes' where on Windows the default list of known file locations are writable meaning other users can create invalid files to cause MemoryError to be raised on Python runtime startup or have file extensions be interpreted as the incorrect file type. This defect is caused by the default locations of Linux and macOS platforms (such as '/etc/mime.types') also being used on Windows, where they are user-writable locations ('C:\etc\mime.types'). Affected Software/OS: Python versions 3.13.2 and prior. Solution: No known solution is available as of 18th February, 2025. Information regarding this issue will be updated once solution details are available. CVSS Score: 5.5 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-3220
Copyright	Copyright (C) 2025 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.