CVE-2025-22153: falha de alta gravidade em zopefoundation RestrictedPython
try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.9epss 0.4%
RestrictedPython is a tool that helps to define a subset of the Python language which allows to provide a program input into a trusted environment. Via a type confusion bug in versions of the CPython interpreter starting in 3.11 and prior to 3.13.2 when using `try/except*`, RestrictedPython starting in version 6.0 and prior to version 8.0 could be bypassed. The issue is patched in version 8.0 of RestrictedPython by removing support for `try/except*` clauses. No known workarounds are available.
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L
Produtos afetados
zopefoundation · RestrictedPythonCVEs relacionadas — zopefoundation RestrictedPython
No mesmo produto, das mais perigosas para as menos.
CVE-2023-37271HIGHRestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escapeEPSS 0.8%CVE-2024-47532HIGHRestrictedPython information leakage via `AttributeError.obj` and the `string` moduleEPSS 0.7%CVE-2023-41039HIGHSandbox escape via various forms of "format" in RestrictedPythonEPSS 0.7%CVE-2026-76825HIGHRestrictedPython: Sandbox escape via string.Formatter field resolutionEPSS 0.6%CVE-2026-55830HIGHRestrictedPython guard hooks can be shadowed via positional-only argumentsEPSS 0.3%