Arbitrary Code Execution

2022-06-2708:07:07

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

71.2%

JSON

watools is vulnerable to arbitrary code execution. The vulnerability exists because of a code execution backdoor in all the versions of watools packages available in Pypi which allows an attacker to inject and execute malicious codes.

CPENameOperatorVersion
watoolsle0.0.8
watoolsle0.0.8

CPE	Name	Operator	Version
	watools	le	0.0.8
	watools	le	0.0.8

References

pypi.doubanio.com/simple/request

github.com/advisories/GHSA-xqxg-8497-rcpx

github.com/wateraccounting/watools/issues/5

pypi.org/project/watools/

0.003 Low

EPSS

Percentile

71.2%

JSON

Related for VERACODE:36151