2 matches found
virtualenv: potential command injection via virtual environment activation scripts
A flaw was found in the virtualenv Python package. Due to the improper handling of quotes in magic template strings, the virtual environment activation script is vulnerable to OS command injection,leading to the loss of confidentiality,integrity and availability of the system...
8.4CVSS5.7AI score0.0157EPSS
SaveExploits1References7
virtualenv: potential command injection via virtual environment activation scripts
A flaw was found in the virtualenv Python package. Due to the improper handling of quotes in magic template strings, the virtual environment activation script is vulnerable to OS command injection,leading to the loss of confidentiality,integrity and availability of the system...
8.4CVSS5.7AI score0.0157EPSS
SaveExploits1References7
20