Lucene search
GoogleOSV:GHSA-77QV-GH6F-PGH4HistoryJun 22, 2020 - 3:24 p.m.
Command Injection in Limdu
2020-06-2215:24:06
Google
osv.dev
6
0.002 Low
EPSS
Percentile
53.0%
Impact
The trainBatch function has a command injection vulnerability. Clients of the Limdu library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability.
Patches
Patched in version 0.9.5.
Workarounds
Do not use trainBatch with classifiers that rely on shell execution, such as SVM Perf, SVM Linear or Adaboost
References
No
Related
githubexploit
githubexploit
Exploit for OS Command Injection in Limdu Project Limdu
2020-12-01 09:45:48
veracode
veracode
OS Command Injection
2020-06-22 22:48:05
cvelist
cvelist
CVE-2020-4066 Command Injection in Limdu trainBatch function
2020-06-22 15:25:13
cve
cve
CVE-2020-4066
2020-06-22 16:15:11
prion
prion
Command injection
2020-06-22 16:15:00
nvd
nvd
CVE-2020-4066
2020-06-22 16:15:11
github
github
Command Injection in Limdu
2020-06-22 15:24:06