NASA AIT-Core vulnerable to remote code execution

2024-05-2121:30:27

Google

osv.dev

nasa ait-core

v2.5.2

pickle python library

remote code execution

vulnerability

software

7.8 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands.

CPENameOperatorVersion
ait-coreeq2.4.0
ait-coreeq2.3.5
ait-coreeq2.3.3
ait-coreeq2.3.2
ait-coreeq2.1.0
ait-coreeq2.2.0
ait-coreeq2.5.2
ait-coreeq2.3.0
ait-coreeq1.4.0
ait-coreeq2.5.0

Name	Operator	Version
ait-core	eq	2.4.0
ait-core	eq	2.3.5
ait-core	eq	2.3.3
ait-core	eq	2.3.2
ait-core	eq	2.1.0
ait-core	eq	2.2.0
ait-core	eq	2.5.2
ait-core	eq	2.3.0
ait-core	eq	1.4.0
ait-core	eq	2.5.0