Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37196
HistorySep 20, 2022 - 11:59 a.m.

Remote Code Execution (RCE)

2022-09-2011:59:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
code execution
vulnerability
package upload
injection
malicious packages
software

EPSS

0.002

Percentile

59.8%

d8s-dates is vulnerable to remote code execution. The vulnerability exists because the library does not properly handle the package upload mechanism, allowing an attacker to inject and execute malicious packages

EPSS

0.002

Percentile

59.8%

Related for VERACODE:37196