Remote Code Execution

2022-09-2015:19:11

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

remote code execution

vulnerability

uploaded malicious code

wrapper method

software

EPSS

0.002

Percentile

59.8%

JSON

d8s_domains is vulnerable to remote code execution. A potential code-execution backdoor inserted by a third party allows an attacker to upload and execute malicious code on the system under attack, through the vulnerable wrapper method.

Affected configurations

Vulners

Node

democritusd8s-domainsMatch0.1.0python

VendorProductVersionCPE
democritusd8s-domains0.1.0cpe:2.3:a:democritus:d8s-domains:0.1.0:*:*:*:*:python:*:*

Vendor	Product	Version	CPE
democritus	d8s-domains	0.1.0	cpe:2.3:a:democritus:d8s-domains:0.1.0:::::python::

References

github.com/democritus-project/d8s-domains/commit/ff16b07ac957a57e631fbc759db9871fed1de5dc

github.com/democritus-project/d8s-domains/issues/7

pypi.org/project/democritus-networking/

EPSS

0.002

Percentile

59.8%

JSON

Related for VERACODE:37203