Vulnerabilities (CVE)

Filtered by vendor Python Subscribe
Filtered by product Setuptools
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-1633 1 Python 1 Setuptools 2013-10-11 6.8 MEDIUM N/A
easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to the default use of the product.