CVE-2020-15142

Опубликовано: 14 авг. 2020

Источник: nvd

CVSS3: 8

CVSS3: 9

CVSS2: 6

EPSS Низкий

Описание

In openapi-python-client before version 0.5.3, clients generated with a maliciously crafted OpenAPI Document can generate arbitrary Python code. Subsequent execution of this malicious client is arbitrary code execution.

Ссылки

https://github.com/triaxtec/openapi-python-client/blob/main/CHANGELOG.md#053---2020-08-13
Release Notes
Third Party Advisory
https://github.com/triaxtec/openapi-python-client/commit/f7a56aae32cba823a77a84a1f10400799b19c19a
Patch
Third Party Advisory
https://github.com/triaxtec/openapi-python-client/security/advisories/GHSA-9x4c-63pf-525f
Third Party Advisory
https://pypi.org/project/openapi-python-client/
Product
Third Party Advisory
https://github.com/triaxtec/openapi-python-client/blob/main/CHANGELOG.md#053---2020-08-13
Release Notes
Third Party Advisory
https://github.com/triaxtec/openapi-python-client/commit/f7a56aae32cba823a77a84a1f10400799b19c19a
Patch
Third Party Advisory
https://github.com/triaxtec/openapi-python-client/security/advisories/GHSA-9x4c-63pf-525f
Third Party Advisory
https://pypi.org/project/openapi-python-client/
Product
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:openapi-python-client_project:openapi-python-client:*:*:*:*:*:*:*:*

Версия до 0.5.3 (исключая)

EPSS

Процентиль: 73%

0.00757

Низкий

8 High

CVSS3

9 Critical

CVSS3

6 Medium

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-9x4c-63pf-525f

CVSS3: 8

github

больше 5 лет назад

openapi-python-client Arbitrary Code Generation vulnerability

EPSS

Процентиль: 73%

0.00757

Низкий

8 High

CVSS3

9 Critical

CVSS3

6 Medium

CVSS2

Дефекты

CWE-94