CVE-2020-15142

🗓️ 14 Aug 2020 16:20:13Reported by GitHub_MType

In openapi-python-client before version 0.5.3, clients generated with a maliciously crafted OpenAPI Document can generate arbitrary Python code. Subsequent execution of this malicious client is arbitrary code execution

Reporter	Title	Published	Views	Family All 10
Cvelist	CVE-2020-15142 Arbitrary Code Generation	14 Aug 202016:20	–	cvelist
EUVD	EUVD-2020-0122	7 Oct 202500:30	–	euvd
Github Security Blog	openapi-python-client Arbitrary Code Generation vulnerability	20 Aug 202014:38	–	github
NVD	CVE-2020-15142	14 Aug 202017:15	–	nvd
OSV	GHSA-9X4C-63PF-525F openapi-python-client Arbitrary Code Generation vulnerability	20 Aug 202014:38	–	osv
OSV	PYSEC-2020-71	14 Aug 202017:15	–	osv
Prion	Design/Logic Flaw	14 Aug 202017:15	–	prion
PyPA	PYSEC-2020-71	14 Aug 202017:15	–	pypa
RedhatCVE	CVE-2020-15142	5 Feb 202514:53	–	redhatcve
Veracode	Arbitrary Code Execution	21 Aug 202003:53	–	veracode

NVD

Vulners

Node

openapi-python-client_project openapi-python-clientRange<0.5.3

[
  {
    "product": "openapi-python-client",
    "vendor": "triaxtec",
    "versions": [
      {
        "status": "affected",
        "version": "< 0.5.3"
      }
    ]
  }
]

Source	Link
github	www.github.com/triaxtec/openapi-python-client/security/advisories/GHSA-9x4c-63pf-525f
github	www.github.com/triaxtec/openapi-python-client/blob/main/CHANGELOG.md
pypi	www.pypi.org/project/openapi-python-client/
github	www.github.com/triaxtec/openapi-python-client/commit/f7a56aae32cba823a77a84a1f10400799b19c19a

21 Nov 2024 05:04Current

8.8High risk

Vulners AI Score8.8

CVSS 26

CVSS 3.18 - 9

EPSS0.00757

CWE-94