Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-34gp-mhv2-cg2f

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because "python -m" looks in this directory, as demonstrated by rdf2dot. This issue is specific to use of the debian/scripts directory.

The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because "python -m" looks in this directory, as demonstrated by rdf2dot. This issue is specific to use of the debian/scripts directory.

EPSS

Процентиль: 77%
0.01001
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-427

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 7 лет назад

The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because "python -m" looks in this directory, as demonstrated by rdf2dot. This issue is specific to use of the debian/scripts directory.

CVSS3: 9.8
nvd
почти 7 лет назад

The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because "python -m" looks in this directory, as demonstrated by rdf2dot. This issue is specific to use of the debian/scripts directory.

CVSS3: 9.8
debian
почти 7 лет назад

The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CL ...

EPSS

Процентиль: 77%
0.01001
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-427