Privilege Escalation

2022-09-0806:07:23

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

poetry

privilege escalation

vulnerability

windows

operating systems

injection

malicious code

credentials

access persistence

EPSS

0.001

Percentile

21.8%

JSON

poetry is vulnerable to privilege escalation. The vulnerability exists because the get_system_env function of env.py does not properly validate the absolute path in windows operating systems, allowing an attacker to inject and execute malicious code and steal the credentials or persist their access.