ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command

ID: NFLX-2024-002 ImpactAuthenticated users can achieve limited RCE in ConsoleMe, restricted to flag inputs on a single CLI command. Due to this constraint, it is not currently known whether full RCE is possible but it is unlikely. However, a specific flag allows authenticated users to read any...

PYSEC-2026-318 ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command

ID: NFLX-2024-002 Impact Authenticated users can achieve limited RCE in ConsoleMe, restricted to flag inputs on a single CLI command. Due to this constraint, it is not currently known whether full RCE is possible but it is unlikely. However, a specific flag allows authenticated users to read any...

PT-2026-53410

ID: NFLX-2024-002 Impact Authenticated users can achieve limited RCE in ConsoleMe, restricted to flag inputs on a single CLI command. Due to this constraint, it is not currently known whether full RCE is possible but it is unlikely. However, a specific flag allows authenticated users to read any...

CVE-2022-27177

A Python format string issue leading to information disclosure and potentially remote code execution in ConsoleMe for all versions prior to 1.2.2...

EUVD-2024-1380

Malicious code in bioql PyPI...

EUVD-2022-0046

Malicious code in bioql PyPI...

Command Injection

consoleme is vulnerable to Command Injection. The vulnerability is due to improper neutralization of special elements used in a command, potentially allowing an attacker to inject and execute arbitrary commands via an argument flag...

ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command

ID: NFLX-2024-002 Impact Authenticated users can achieve limited RCE in ConsoleMe, restricted to flag inputs on a single CLI command. Due to this constraint, it is not currently known whether full RCE is possible but it is unlikely. However, a specific flag allows authenticated users to read any...

CVE-2024-5023

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Netflix ConsoleMe allows Command Injection.This issue affects ConsoleMe: before 1.4.0...

CVE-2024-5023

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Netflix ConsoleMe allows Command Injection.This issue affects ConsoleMe: before 1.4.0...

CVE-2024-5023 Arbitrary File Read Vulnerability in ConsoleMe via Limited Git command RCE

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Netflix ConsoleMe allows Command Injection.This issue affects ConsoleMe: before 1.4.0...

CVE-2024-5023

CVE-2024-5023 affects Netflix ConsoleMe prior to 1.4.0. Root cause: improper neutralization of special elements used in a command within Template resources flow, enabling command execution via crafted inputs. Documentation indicates authenticated users can achieve limited remote code execution co...

CVE-2024-5023 Arbitrary File Read Vulnerability in ConsoleMe via Limited Git command RCE

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Netflix ConsoleMe allows Command Injection.This issue affects ConsoleMe: before 1.4.0...

CVE-2024-5023 Arbitrary File Read Vulnerability in ConsoleMe via Limited Git command RCE

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Netflix ConsoleMe allows Command Injection.This issue affects ConsoleMe: before 1.4.0...

CVE-2024-5023: Improper Neutralization of Special Elements used in a Command

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Netflix ConsoleMe allows Command Injection.This issue affects ConsoleMe: before 1.4.0...

PT-2024-34062

Name of the Vulnerable Software and Affected Versions: ConsoleMe versions prior to 1.4.0 Description: The issue is related to Command Injection, where authenticated users can achieve limited Remote Code Execution RCE in ConsoleMe, restricted to flag inputs on a single CLI command. However, it is...

Netflix ConsoleMe security vulnerability

ConsoleMe is a web service that makes AWS IAM rights and credentials management easier for end users and cloud administrators. A security vulnerability exists in Netflix ConsoleMe versions prior to 1.4.0 that stems from incorrect neutralization of special elements used in commands, resulting in...

Remote Code Execution

consoleme is vulnerable to remote code execution. A remote attacker is able to upload and execute malicious code and gain access to sensitive user information on the targeted system due to a python format string issue in iterateandformatdict function...

Use of Externally-Controlled Format String in consoleme

A Python format string issue leading to information disclosure and potentially remote code execution in ConsoleMe for all versions prior to 1.2.2...

GHSA-74W3-2R77-FW5H Use of Externally-Controlled Format String in consoleme

A Python format string issue leading to information disclosure and potentially remote code execution in ConsoleMe for all versions prior to 1.2.2...