Lucene search

K
githubGitHub Advisory DatabaseGHSA-C2FX-8R76-GH36
HistoryNov 06, 2018 - 11:14 p.m.

High severity vulnerability that affects python-gnupg

2018-11-0623:14:22
GitHub Advisory Database
github.com
11

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.6%

python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.

Affected configurations

Vulners
Node
pythonpython-gnupgRange<0.3.5
CPENameOperatorVersion
python-gnupglt0.3.5

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.6%