Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34549
HistoryMar 07, 2022 - 8:31 a.m.

Remote Code Execution (RCE)

2022-03-0708:31:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

0.003 Low

EPSS

Percentile

69.3%

weblate, is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization of the check_config function in the mercurial.py file allowing a malicious user to execute command via argument injection to crash the system

CPENameOperatorVersion
weblatele4.11
weblatele4.11

0.003 Low

EPSS

Percentile

69.3%

Related for VERACODE:34549