CVE-2021-42969

2022-05-1311:39:43

mitre

www.cve.org

9.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.8%

JSON

Certain Anaconda3 2021.05 are affected by OS command injection. When a user installs Anaconda, an attacker can create a new file and write something in usercustomize.py. When the user opens the terminal or activates Anaconda, the command will be executed.

References

yuaneuro.cn/anaconda/anaconda_command_execution.docx