Code Injection

🗓️ 15 Jul 2024 10:16:11Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 16 Views

Code Injection vulnerability in setuptools package_index module download functio

Reporter	Title	Published	Views	Family All 521
IBM Security Bulletins	Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data has addressed security vulnerabilities	6 May 202519:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	7 Mar 202515:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 1.15.0 IF001	31 Jul 202409:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Analytics - NPS Product	15 Jul 202515:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	19 Jun 202505:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	27 Sep 202422:50	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Advisor With Watson for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	17 Mar 202513:46	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is affected by information disclosure (CVE-2023-45803) and arbitrary code execution (CVE-2024-6345) due to Python	12 Aug 202422:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to an arbitrary code execution in pypa/setuptools [CVE-2024-6345]	27 Sep 202422:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	27 Sep 202422:45	–	ibm

Vulners

Node

py3-setuptools py3-setuptoolsMatch67.7.2-r0python

AND

py3-setuptools py3-setuptoolsMatch67.7.0-r0python

AND

py3-setuptools py3-setuptoolsMatch67.7.1-r0python

AND

alpinelinux alpine_linuxMatch3.18

py3-setuptools py3-setuptoolsMatch65.5.1-r0python

AND

py3-setuptools py3-setuptoolsMatch65.5.0-r0python

AND

py3-setuptools py3-setuptoolsMatch65.6.0-r0python

AND

alpinelinux alpine_linuxMatch3.17

py3-setuptools py3-setuptoolsMatch69.5.1-r0python

AND

alpinelinux alpine_linuxMatch3.20

py3-setuptools py3-setuptoolsMatch68.2.2-r0python

AND

alpinelinux alpine_linuxMatch3.19

py3-setuptools py3-setuptoolsMatch65.1.0-r0python

AND

py3-setuptools py3-setuptoolsMatch68.2.2-r0python

AND

py3-setuptools py3-setuptoolsMatch66.1.1-r0python

AND

py3-setuptools py3-setuptoolsMatch52.0.0-r4python

AND

py3-setuptools py3-setuptoolsMatch52.0.0-r0python

AND

py3-setuptools py3-setuptoolsMatch65.4.0-r0python

AND

py3-setuptools py3-setuptoolsMatch59.4.0-r0python

AND

py3-setuptools py3-setuptoolsMatch69.2.0-r0python

AND

py3-setuptools py3-setuptoolsMatch70.0.0-r0python

AND

py3-setuptools py3-setuptoolsMatch68.2.0-r0python

AND

py3-setuptools py3-setuptoolsMatch67.0.0-r0python

AND

py3-setuptools py3-setuptoolsMatch67.3.3-r0python

AND

py3-setuptools py3-setuptoolsMatch68.0.0-r0python

AND

py3-setuptools py3-setuptoolsMatch52.0.0-r3python

AND

py3-setuptools py3-setuptoolsMatch46.4.0-r0python

AND

py3-setuptools py3-setuptoolsMatch65.3.0-r0python

AND

py3-setuptools py3-setuptoolsMatch65.4.1-r0python

AND

py3-setuptools py3-setuptoolsMatch67.5.1-r0python

AND

py3-setuptools py3-setuptoolsMatch68.2.1-r0python

AND

py3-setuptools py3-setuptoolsMatch46.0.0-r0python

AND

py3-setuptools py3-setuptoolsMatch67.8.0-r0python

AND

py3-setuptools py3-setuptoolsMatch69.1.1-r0python

AND

py3-setuptools py3-setuptoolsMatch65.5.0-r0python

AND

py3-setuptools py3-setuptoolsMatch68.0.0-r2python

AND

py3-setuptools py3-setuptoolsMatch69.2.0-r2python

AND

py3-setuptools py3-setuptoolsMatch69.1.0-r0python

AND

py3-setuptools py3-setuptoolsMatch65.5.1-r0python

AND

py3-setuptools py3-setuptoolsMatch65.7.0-r0python

AND

py3-setuptools py3-setuptoolsMatch52.0.0-r2python

AND

py3-setuptools py3-setuptoolsMatch67.7.1-r0python

AND

py3-setuptools py3-setuptoolsMatch67.2.0-r0python

AND

py3-setuptools py3-setuptoolsMatch67.7.2-r0python

AND

py3-setuptools py3-setuptoolsMatch46.1.3-r0python

AND

py3-setuptools py3-setuptoolsMatch65.1.1-r0python

AND

py3-setuptools py3-setuptoolsMatch52.0.0-r5python

AND

py3-setuptools py3-setuptoolsMatch67.4.0-r1python

AND

py3-setuptools py3-setuptoolsMatch65.6.3-r0python

AND

py3-setuptools py3-setuptoolsMatch70.1.0-r0python

AND

py3-setuptools py3-setuptoolsMatch46.1.1-r0python

AND

py3-setuptools py3-setuptoolsMatch67.6.1-r0python

AND

py3-setuptools py3-setuptoolsMatch47.1.1-r0python

AND

py3-setuptools py3-setuptoolsMatch45.2.0-r1python

AND

py3-setuptools py3-setuptoolsMatch45.3.0-r0python

AND

py3-setuptools py3-setuptoolsMatch69.5.1-r0python

AND

py3-setuptools py3-setuptoolsMatch65.6.0-r0python

AND

py3-setuptools py3-setuptoolsMatch67.6.0-r0python

AND

py3-setuptools py3-setuptoolsMatch70.1.1-r0python

AND

alpinelinux alpine_linuxMatchedge

python setuptoolsRange0.6b1–69.5.1python

Source	Link
github	www.github.com/pypa/setuptools/issues/4331
github	www.github.com/pypa/setuptools/pull/4332
github	www.github.com/pypa/setuptools/commit/88807c7062788254f654ea8c03427adc859321f0
github	www.github.com/advisories/GHSA-cx63-2mw6-8hw5
huntr	www.huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5

16 Jul 2024 10:26Current

7.5High risk

Vulners AI Score7.5

CVSS 38.8

EPSS0.09875

SSVC