Lucene search
GoogleOSV:GHSA-7XC5-GGPP-G249HistoryApr 20, 2021 - 4:13 p.m.
pwntools Server-Side Template Injection (SSTI) vulnerability
2021-04-2016:13:24
Google
osv.dev
7
pwntools
server-side template injection
ssti
vulnerability
remote code execution
software
EPSS
0.033
Percentile
91.5%
This affects the package pwntools before 4.3.1. The shellcraft generator for affected versions of this module are vulnerable to Server-Side Template Injection (SSTI), which can lead to remote code execution.
Related
nvd
nvd
CVE-2020-28468
2021-01-08 12:15:12
cve
cve
CVE-2020-28468
2021-01-08 12:15:12
veracode
veracode
Server-Side Template Injection (SSTI)
2021-01-11 06:23:12
github
github
pwntools Server-Side Template Injection (SSTI) vulnerability
2021-04-20 16:13:24
osv
osv
PYSEC-2021-72
2021-01-08 12:15:00
CVE-2020-28468
2021-01-08 12:15:12
prion
prion
Remote code execution
2021-01-08 12:15:00
cvelist
cvelist
CVE-2020-28468 Improper Control of Generation of Code ('Code Injection')
2021-01-08 11:20:13