Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-45158
HistoryOct 16, 2023 - 8:15 a.m.

Command injection

2023-10-1608:15:00
PRIOn knowledge base
www.prio-n.com
6
os command injection
web2py
vulnerability
notifysendhandler
logging
web server

9.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.3%

An OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is configured to use notifySendHandler for logging (not the default configuration), a crafted web request may execute an arbitrary OS command on the web server using the product.

CPENameOperatorVersion
web2pyle2.24.1

9.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.3%

Related for PRION:CVE-2023-45158