Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:GHSA-GJJR-63X4-V8CQ
HistoryOct 09, 2023 - 9:30 p.m.

langchain_experimental vulnerable to arbitrary code execution via PALChain in the python exec method

2023-10-0921:30:27
Google
osv.dev
8
vulnerable
arbitrary code execution
bypass
cve-2023-36258
palchain
python exec method
software

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.8%

JSON

langchain_experimental 0.0.14 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via the PALChain in the python exec method.

Related

nvd 3
osv 7
cve 3
cvelist 3
prion 3
veracode 2
github 3
nvd
nvd
CVE-2023-44467
2023-10-09 20:15:10
CVE-2023-36258
2023-07-03 21:15:09
CVE-2024-27444
2024-02-26 16:28:00
osv
osv
CVE-2023-44467
2023-10-09 20:15:10
PYSEC-2023-194
2023-10-09 20:15:00
CVE-2023-36258
2023-07-03 21:15:09
cve
cve
CVE-2023-44467
2023-10-09 20:15:10
CVE-2023-36258
2023-07-03 21:15:09
CVE-2024-27444
2024-02-26 16:28:00
cvelist
cvelist
CVE-2023-44467
2023-10-09 00:00:00
CVE-2023-36258
2023-07-03 00:00:00
CVE-2024-27444
2024-02-26 00:00:00
prion
prion
Design/Logic Flaw
2023-10-09 20:15:00
Code injection
2023-07-03 21:15:00
Authentication flaw
2024-02-26 16:28:00
veracode
veracode
Code Injection
2023-10-11 06:12:48
Remote Code Execution (RCE)
2023-07-11 01:25:11
github
github
langchain_experimental vulnerable to arbitrary code execution via PALChain in the python exec method
2023-10-09 21:30:27
langchain arbitrary code execution vulnerability
2023-07-03 21:30:57
LangChain Experimental vulnerable to arbitrary code execution
2024-02-26 18:30:31

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.8%

JSON
Related for OSV:GHSA-GJJR-63X4-V8CQ
nvd3osv7cve3cvelist3prion3veracode2github3