Lucene search
HistoryDec 03, 2014 - 9:59 p.m.
CVE-2013-7416
cve
2013
7416
canto
curses
guibase.py
remote feed
arbitrary commands
shell metacharacters
url
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
79.9%
canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a feed.
Affected configurations
Node
cantocanto_cursesRange≤0.9.0alpha5
ORcantocanto_cursesMatch0.8.4
ORcantocanto_cursesMatch0.9.0alpha2
ORcantocanto_cursesMatch0.9.0alpha3
ORcantocanto_cursesMatch0.9.0alpha4
| CPE | Name | Operator | Version |
|---|---|---|---|
| canto:canto_curses | canto canto curses | le | 0.9.0 |
| canto:canto_curses | canto canto curses | eq | 0.8.4 |
Related
ubuntucve
ubuntucve
CVE-2013-7416
2014-12-03 00:00:00
prion
prion
Code injection
2014-12-03 21:59:00
cvelist
cvelist
CVE-2013-7416
2014-12-03 21:00:00
nvd
nvd
CVE-2013-7416
2014-12-03 21:59:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
79.9%
Related for CVE-2013-7416