A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory...
7.8CVSS7.7AI score0.00662EPSS
SaveExploits1References3
Mend•added 2020/07/17 2:15 a.m.•9 views
CVE-2020-15801
In Python 3.8.4, sys.path restrictions specified in a python38.pth file are ignored, allowing code to be loaded from arbitrary locations. The .pth file e.g., the python.pth file is not affected...
