Lucene search

pymatgen vulnerable to arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string

🗓️ 21 Feb 2024 18:00:04Reported by GoogleType

osv🔗 osv.dev👁 211 Views

Critical security vulnerability in pymatgen JonesFaithfulTransformation method, allows arbitrary code execution from maliciously crafted transformation string

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 20
Vulnrichment	CVE-2024-23346 pymatgen arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string	21 Feb 202416:13	–	vulnrichment
Veracode	Arbitrary Code Execution	22 Feb 202410:57	–	veracode
OSV	CVE-2024-23346	21 Feb 202417:15	–	osv
OSV	DSA-5763-1 pymatgen - security update	30 Aug 202400:00	–	osv
Cvelist	CVE-2024-23346 pymatgen arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string	21 Feb 202416:13	–	cvelist
Tenable Nessus	Debian dsa-5763 : python-pymatgen-doc - security update	30 Aug 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2024-23346	5 Mar 202500:00	–	nessus
CVE	CVE-2024-23346	21 Feb 202417:15	–	cve
Debian	[SECURITY] [DSA 5763-1] pymatgen security update	30 Aug 202418:05	–	debian
Github Security Blog	pymatgen vulnerable to arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string	21 Feb 202418:04	–	github

Source	Link
github	www.github.com/materialsproject/pymatgen/security/advisories/GHSA-vgv8-5cpj-qj2f
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-23346
github	www.github.com/materialsproject/pymatgen/commit/c231cbd3d5147ee920a37b6ee9dd236b376bcf5a
github	www.github.com/materialsproject/pymatgen
github	www.github.com/materialsproject/pymatgen/blob/master/pymatgen/symmetry/settings.py

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Feb 2024 18:04Current

7.8High risk

Vulners AI Score7.8

CVSS39.3

EPSS0.30046

SSVC