6 matches found
TDQM Arbitrary Code Execution
The tqdm.version module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with a malicious git log in the current working directory...
tqdm: Arbitrary code execution
Background tqdm is a smart progress meter. Description A vulnerablility was discovered in tqdm.version that could allow a malicious git log within the current working directory. Impact A remote attacker could execute arbitrary commands by enticing a user to clone a crafted repo. Workaround There ...
PYSEC-2017-74
The tqdm.version module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with a malicious git log in the current working directory...
CVE-2016-10075
CVE-2016-10075 affects the tqdm Python package, specifically the tqdm._version module, with vulnerable versions including 4.4.1 and 4.10. A local attacker could cause arbitrary code execution by crafting a git log in the current working directory. The issue arises from how the module processes re...
