Remote Code Execution (RCE)

2022-06-0908:17:00

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.005 Low

EPSS

Percentile

76.7%

JSON

keep is vulnerable to remote code execution. The vulnerability exists due to the library has a malicious backdoor which allows an attacker to inject maliciously crafted script into the system.

CPENameOperatorVersion
keeple2.10.1
keeple2.10.1

CPE	Name	Operator	Version
	keep	le	2.10.1
	keep	le	2.10.1

References

pypi.doubanio.com/simple/request

github.com/OrkoHunter/keep/issues/85

pypi.org/project/keep

0.005 Low

EPSS

Percentile

76.7%

JSON

Related for VERACODE:35925