Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q6v5-58gv-cxgm

Опубликовано: 22 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

Codemers KLIMS 1.6.DEV allows Python code injection. A user can provide Python code as an input value for a parameter or qualifier (such as for sorting), which will get executed on the server side.

Codemers KLIMS 1.6.DEV allows Python code injection. A user can provide Python code as an input value for a parameter or qualifier (such as for sorting), which will get executed on the server side.

EPSS

Процентиль: 23%
0.00078
Низкий

7.3 High

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 7.3
nvd
10 месяцев назад

Codemers KLIMS 1.6.DEV allows Python code injection. A user can provide Python code as an input value for a parameter or qualifier (such as for sorting), which will get executed on the server side.

EPSS

Процентиль: 23%
0.00078
Низкий

7.3 High

CVSS3

Дефекты

CWE-77