CVE-2026-7246

Опубликовано: 30 апр. 2026

Источник: nvd

CVSS3: 7.2

EPSS Низкий

Описание

Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:palletsprojects:click:*:*:*:*:*:*:*:*

Версия до 8.3.3 (исключая)

EPSS

Процентиль: 56%

0.009

Низкий

7.2 High

CVSS3

Дефекты

CWE-77

CWE-78

Связанные уязвимости

CVE-2026-7246

CVSS3: 7.2

ubuntu

3 месяца назад

Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.

CVE-2026-7246

CVSS3: 7.2

redhat

3 месяца назад

Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.

CVE-2026-7246

CVSS3: 7.2

msrc

2 месяца назад

Pallets Click contains a command injection via Unsanitized Filename "click.edit()"

CVE-2026-7246

CVSS3: 7.2

debian

3 месяца назад

Pallets Click, versions 8.3.2 and below, contain a command injection v ...

openSUSE-SU-2026:21017-1

suse-cvrf

около 1 месяца назад

Security update for python-click

EPSS

Процентиль: 56%

0.009

Низкий

7.2 High

CVSS3

Дефекты

CWE-77

CWE-78