Lucene search
Veracode Vulnerability DatabaseVERACODE:25483HistoryMay 26, 2020 - 4:02 a.m.
Arbitrary Command Injection
2020-05-2604:02:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.043 Low
EPSS
Percentile
92.4%
jw_util is vulnerable to arbitrary command injection. The vulnerability exists as it uses the insecure function yaml.load without any validation in FromString and FromStream.
Related
nvd
nvd
CVE-2020-13388
2020-05-22 17:15:10
osv
osv
PYSEC-2020-341
2020-05-22 17:15:00
OS Command Injection in jw.util
2021-06-02 21:45:12
github
github
OS Command Injection in jw.util
2021-06-02 21:45:12
prion
prion
Design/Logic Flaw
2020-05-22 17:15:00
cve
cve
CVE-2020-13388
2020-05-22 17:15:10
cvelist
cvelist
CVE-2020-13388
2020-05-22 16:07:19
