Lucene search

SnykCVELIST:CVE-2020-28468

HistoryJan 08, 2021 - 11:20 a.m.

CVE-2020-28468 Improper Control of Generation of Code ('Code Injection')

2021-01-0811:20:13

snyk

www.cve.org

pwntools package

code injection

remote code execution

ssti

vulnerability

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P

AI Score

Confidence

High

EPSS

0.033

Percentile

91.5%

JSON

This affects the package pwntools before 4.3.1. The shellcraft generator for affected versions of this module are vulnerable to Server-Side Template Injection (SSTI), which can lead to remote code execution.

CNA Affected

[
  {
    "product": "pwntools",
    "vendor": "n/a",
    "versions": [
      {
        "lessThan": "4.3.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/Gallopsled/pwntools/issues/1427

github.com/Gallopsled/pwntools/pull/1732

snyk.io/vuln/SNYK-PYTHON-PWNTOOLS-1047345

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P

AI Score

Confidence

High

EPSS

0.033

Percentile

91.5%

JSON

Related for CVELIST:CVE-2020-28468