GHSA-7XC5-GGPP-G249 pwntools Server-Side Template Injection (SSTI) vulnerability

🗓️ 20 Apr 2021 16:13:24Reported by GoogleType

osv

osv🔗 osv.dev👁 17 Views

pwntools Server-Side Template Injection (SSTI) vulnerability affecting versions before 4.3.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2020-28468	8 Jan 202114:41	–	circl
CNNVD	Gallopsled Pwntools Code Injection Vulnerability	8 Jan 202100:00	–	cnnvd
CVE	CVE-2020-28468	8 Jan 202111:20	–	cve
Cvelist	CVE-2020-28468 Improper Control of Generation of Code ('Code Injection')	8 Jan 202111:20	–	cvelist
EUVD	EUVD-2021-0204	7 Oct 202500:30	–	euvd
Github Security Blog	pwntools Server-Side Template Injection (SSTI) vulnerability	20 Apr 202116:13	–	github
NVD	CVE-2020-28468	8 Jan 202112:15	–	nvd
OSV	PYSEC-2021-72	8 Jan 202112:15	–	osv
Prion	Remote code execution	8 Jan 202112:15	–	prion
PyPA	PYSEC-2021-72	8 Jan 202112:15	–	pypa

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-28468
github	www.github.com/Gallopsled/pwntools/issues/1427
github	www.github.com/Gallopsled/pwntools/pull/1732
github	www.github.com/Gallopsled/pwntools/commit/138188eb1c027a2d0ffa4151511c407d3a001660
github	www.github.com/Gallopsled/pwntools
github	www.github.com/advisories/GHSA-7xc5-ggpp-g249
github	www.github.com/pypa/advisory-database/tree/main/vulns/pwntools/PYSEC-2021-72.yaml
snyk	www.snyk.io/vuln/SNYK-PYTHON-PWNTOOLS-1047345

18 Oct 2024 22:22Current

9.9High risk

Vulners AI Score9.9

CVSS 49.3

CVSS 3.19.8

EPSS0.04162

pwntools server-side template injection ssti vulnerability remote code execution software