Arbitrary Code Execution

2022-07-2506:21:14

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

arbitrary code execution

pypi.doubanio.com

malicious backdoor

software vulnerability

EPSS

0.002

Percentile

64.9%

JSON

bin-collect is vulnerable to arbitrary code execution. The vulnerability exists due to incomplete deletion of some packages getting installed from pypi.doubanio.com creating a malicious back door which allows an attacker to inject and execute arbitrary codes.