Code injection

2023-08-1114:15:00

PRIOn knowledge base

www.prio-n.com

code injection

foldingathome

remote attackers

arbitrary code execution

vulnerability

nvd

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%

JSON

An issue was discovered in FoldingAtHome Client Advanced Control GUI before commit 9b619ae64443997948a36dda01b420578de1af77, allows remote attackers to execute arbitrary code via crafted payload to function parse_message in file Connection.py.

CPENameOperatorVersion
client_advanced_controleq< 2022922

CPE	Name	Operator	Version
	client_advanced_control	eq	< 2022922

References

github.com/FoldingAtHome/fah-control/commit/9b619ae64443997948a36dda01b420578de1af77