Design/Logic Flaw

2023-01-1320:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

gitlearn

escape sequence handler

remote injection

patch

vdb-218302

7.9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.6%

JSON

A vulnerability was found in gitlearn. It has been declared as problematic. This vulnerability affects the function getGrade/getOutOf of the file scripts/config.sh of the component Escape Sequence Handler. The manipulation leads to injection. The attack can be initiated remotely. The patch is identified as 3faa5deaa509012069afe75cd03c21bda5050a64. It is recommended to apply a patch to fix this issue. VDB-218302 is the identifier assigned to this vulnerability.

CPENameOperatorVersion
gitlearneq< 201569

CPE	Name	Operator	Version
	gitlearn	eq	< 201569

References

github.com/mikeizbicki/gitlearn/commit/3faa5deaa509012069afe75cd03c21bda5050a64

github.com/mikeizbicki/gitlearn/pull/31

vuldb.com/?ctiid.218302

vuldb.com/?id.218302