Описание
An OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is configured to use notifySendHandler for logging (not the default configuration), a crafted web request may execute an arbitrary OS command on the web server using the product.
Ссылки
- Product
- Product
- Patch
- Third Party Advisory
- Product
- Product
- Patch
- Third Party Advisory
Уязвимые конфигурации
EPSS
9.8 Critical
CVSS3
Дефекты
Связанные уязвимости
An OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is configured to use notifySendHandler for logging (not the default configuration), a crafted web request may execute an arbitrary OS command on the web server using the product.
An OS command injection vulnerability exists in web2py 2.24.1 and earl ...
An OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is configured to use notifySendHandler for logging (not the default configuration), a crafted web request may execute an arbitrary OS command on the web server using the product.
Уязвимость фреймворка разработки веб-приложений web2py, существующая из-за непринятия мер по нейтрализации специальных элементов, используемых в команде операционной системы, повзволяющая нарушителю выполнить произвольную команду
EPSS
9.8 Critical
CVSS3