CVE-2023-32303
2 advisories.
PyPI/planet CVE-2023-32303: medium 5.5
Planet's secret file is created with excessive permissions
Action: Upgrade planet to 2.0.1 or later.
pip install planet==2.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.1 | - |
Fixed versions
| 2.0.1 |
Sources
- osv: GHSA-j5fj-rfh6-qj85
- https://github.com/planetlabs/planet-client-python/security/advisories/GHSA-j5fj-rfh6-qj85
- https://nvd.nist.gov/vuln/detail/CVE-2023-32303
- https://github.com/planetlabs/planet-client-python/commit/d71415a83119c5e89d7b80d5f940d162376ee3b7
- https://github.com/planetlabs/planet-client-python
- https://github.com/planetlabs/planet-client-python/releases/tag/2.0.1
- https://github.com/pypa/advisory-database/tree/main/vulns/planet/PYSEC-2023-71.yaml
CVE-2023-32303 · published · modified · JSON
PyPI/planet CVE-2023-32303: unknown
Planet is software that provides satellite data. The secret file stores the user's Planet API authentication information. It should only be accessible by the user, but before version 2.0.1, its permis
Action: Upgrade planet to 2.0.1 or later.
pip install planet==2.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.1 | - |
Fixed versions
| 2.0.1 |
Sources
- osv: PYSEC-2023-71
- https://github.com/planetlabs/planet-client-python/commit/d71415a83119c5e89d7b80d5f940d162376ee3b7
- https://github.com/planetlabs/planet-client-python/security/advisories/GHSA-j5fj-rfh6-qj85
- https://github.com/planetlabs/planet-client-python/releases/tag/2.0.1
CVE-2023-32303 · published · modified · JSON