Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/28 12:00 a.m.•1 views

CVE-2023-26145: Improper Neutralization of Special Elements used in an OS Command

This affects versions of the package pydash before 6.0.0. A number of pydash methods such as pydash.objects.invoke and pydash.collections.invokemap accept dotted paths Deep Path Strings to target a nested Python object, relative to the original source object. These paths can be used to target...

8.1CVSS7.2AI score0.03595EPSS
SaveExploits1References4
Rows per page
Query Builder