Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-H72C-W3Q3-55QQ
HistoryJun 02, 2021 - 9:45 p.m.

OS Command Injection in jw.util

2021-06-0221:45:12
CWE-78
GitHub Advisory Database
github.com
50

0.043 Low

EPSS

Percentile

92.3%

JSON

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safe_load is not used.

CPENameOperatorVersion
jw.utillt2.3

Related

cvelist 1
cve 1
veracode 1
osv 2
prion 1
ibm 1
cvelist
cvelist
CVE-2020-13388
2020-05-22 16:07:19
cve
cve
CVE-2020-13388
2020-05-22 17:15:00
veracode
veracode
Arbitrary Command Injection
2020-05-26 04:02:11
osv
osv
PYSEC-2020-341
2020-05-22 17:15:00
OS Command Injection in jw.util
2021-06-02 21:45:12
prion
prion
Design/Logic Flaw
2020-05-22 17:15:00
ibm
ibm
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Python
2020-06-19 05:08:48

0.043 Low

EPSS

Percentile

92.3%

JSON
Related for GHSA-H72C-W3Q3-55QQ
cvelist1cve1veracode1osv2prion1ibm1