Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rrcg-cxhw-9798

Опубликовано: 17 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A code execution vulnerability has been identified in the Robot Operating System (ROS) 'rosbag' tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval() function to process unsanitized, user-supplied input in the 'rosbag filter' command. This flaw enables attackers to craft and execute arbitrary Python code.

A code execution vulnerability has been identified in the Robot Operating System (ROS) 'rosbag' tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval() function to process unsanitized, user-supplied input in the 'rosbag filter' command. This flaw enables attackers to craft and execute arbitrary Python code.

EPSS

Процентиль: 4%
0.0002
Низкий

7.8 High

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 7.8
ubuntu
7 месяцев назад

A code execution vulnerability has been identified in the Robot Operating System (ROS) 'rosbag' tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval() function to process unsanitized, user-supplied input in the 'rosbag filter' command. This flaw enables attackers to craft and execute arbitrary Python code.

CVSS3: 7.8
nvd
7 месяцев назад

A code execution vulnerability has been identified in the Robot Operating System (ROS) 'rosbag' tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval() function to process unsanitized, user-supplied input in the 'rosbag filter' command. This flaw enables attackers to craft and execute arbitrary Python code.

CVSS3: 7.8
debian
7 месяцев назад

A code execution vulnerability has been identified in the Robot Operat ...

EPSS

Процентиль: 4%
0.0002
Низкий

7.8 High

CVSS3

Дефекты

CWE-94