CVE-2013-1630

pyshop before 0.7.1 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows…

published August 6, 2013

CVSS
—
EPSS
2%
Percentile
81.6
In the wild
Unconfirmed
What it is

pyshop before 0.7.1 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code via a crafted response to a download operation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02100 · 81.6th percentile
Published
2013-08-06T01:00Z
EPSS history
Timeline
  • 06 AUG 01:00Z
    pyshop before 0.7.1 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows…
    cvelistv5