漏洞编号：CVE-2020-13092

漏洞归属组件：scikit-learn

漏洞归属版本：1.11.0

CVSS V3.0分值：
Base Score: 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

漏洞简述：
DISPUTED scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if reduce makes an os.system call. NOTE: third parties dispute this issue because the joblib.load() function is documented as unsafe and it is the user's responsibility to use the function in a secure manner.

影响性分析说明：

原理分析：

openEuler评分：

受影响版本：

规避方案或消减措施：