Lucene search
GoogleOSV:GHSA-VJ95-2F9Q-X7H6HistoryMay 24, 2022 - 4:48 p.m.
glot-code-runner RCE
2022-05-2416:48:34
Google
osv.dev
1
code execution
glot-www
json file
remote attackers
arbitrary code
EPSS
0.01
Percentile
83.8%
The default configuration of glot-www through 2018-05-19 allows remote attackers to execute arbitrary code because glot-code-runner supports os.system within a “python” “files” “content” JSON file.
Related
cve
cve
CVE-2018-15747
2019-06-21 14:15:10
prion
prion
Default configuration
2019-06-21 14:15:00
cvelist
cvelist
CVE-2018-15747
2019-06-21 13:06:54
veracode
veracode
Remote Code Execution (RCE)
2019-06-24 02:04:18
github
github
glot-code-runner RCE
2022-05-24 16:48:34
nvd
nvd
CVE-2018-15747
2019-06-21 14:15:10