2 matches found
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
Overview starlette is a The little ASGI library that shines. Affected versions of this package are vulnerable to Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' when dispatching HTTP requests to endpoint attributes via getattr. An attacker can invoke internal...
6.3CVSS5.5AI score0.00213EPSS
SaveExploits0References2
20