Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-84126
HistoryNov 09, 2022 - 12:00 a.m.

Democritus Project d8s-dates code execution vulnerability

2022-11-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
democritus project
security vulnerability
code execution
backdoor
third party
democritus-timezones
attacker
arbitrary code
system
cnvd

EPSS

0.002

Percentile

65.2%

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A security vulnerability exists in Democritus Project d8s-dates, which stems from the existence of a potential code execution backdoor inserted by a third party in the democritus-timezones package. An attacker could exploit this vulnerability to execute arbitrary code on the system.

EPSS

0.002

Percentile

65.2%

Related for CNVD-2022-84126