Remote Code Execution (RCE)

2022-09-2006:46:51

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

69.4%

JSON

d8s-xml is vulnerable to remote code execution. The vulnerability exists because the library does not properly handle the package upload mechanism, allowing an attacker to inject and execute malicious packages

CPENameOperatorVersion
d8s-xmleq0.1.0
d8s-xmleq0.1.0

CPE	Name	Operator	Version
	d8s-xml	eq	0.1.0
	d8s-xml	eq	0.1.0

References

github.com/democritus-project/d8s-xml/commit/bfff497c43719524e005e30f370bf8c2410ebd5c

github.com/democritus-project/d8s-xml/issues/10

pypi.org/project/d8s-xml/

pypi.org/project/democritus-strings/

0.003 Low

EPSS

Percentile

69.4%

JSON

Related for VERACODE:37184