Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-5397

Опубликовано: 12 фев. 2018
Источник: nvd
CVSS3: 8.8
CVSS2: 9
EPSS Средний

Описание

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:apache:thrift:*:*:*:*:*:*:*:*
Версия до 0.9.3 (включая)

EPSS

Процентиль: 96%
0.22566
Средний

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 8 лет назад

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0.

CVSS3: 7.8
redhat
больше 9 лет назад

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0.

CVSS3: 8.8
debian
почти 8 лет назад

The Apache Thrift Go client library exposed the potential during code ...

CVSS3: 8.8
github
больше 3 лет назад

Apache Thrift Go Library Command Injection

EPSS

Процентиль: 96%
0.22566
Средний

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-77