Arbitrary Code Execution

2020-08-2103:53:28

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

54.0%

JSON

openapi_python_client is vulnerable to arbitrary code execution. An attacker is able to execute arbitrary code on the client via a malicious OpenAPI document due to lack of sanitization and validation.

CPENameOperatorVersion
openapi-python-clienteq0.3.0
openapi-python-clientle0.5.2
openapi-python-clienteq0.3.0
openapi-python-clientle0.5.2

Name	Operator	Version
openapi-python-client	eq	0.3.0
openapi-python-client	le	0.5.2
openapi-python-client	eq	0.3.0
openapi-python-client	le	0.5.2

References

github.com/advisories/GHSA-9x4c-63pf-525f

github.com/triaxtec/openapi-python-client/blob/main/CHANGELOG.md#053---2020-08-13

github.com/triaxtec/openapi-python-client/commit/f7a56aae32cba823a77a84a1f10400799b19c19a

github.com/triaxtec/openapi-python-client/security/advisories/GHSA-9x4c-63pf-525f

pypi.org/project/openapi-python-client/

0.002 Low

EPSS

Percentile

54.0%

JSON

Related for VERACODE:26471