Lucene search

NetflixCVELIST:CVE-2022-27177

HistoryApr 01, 2022 - 10:17 p.m.

CVE-2022-27177

2022-04-0122:17:04

netflix

www.cve.org

cve-2022-27177

python

format string

consoleme

information disclosure

remote code execution

AI Score

9.7

Confidence

High

EPSS

0.005

Percentile

76.1%

JSON

A Python format string issue leading to information disclosure and potentially remote code execution in ConsoleMe for all versions prior to 1.2.2

CNA Affected

[
  {
    "product": "ConsoleMe",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to version 1.2.2"
      }
    ]
  }
]

References

github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2022-001.md