Lucene search
GoogleOSV:PYSEC-2021-72HistoryJan 08, 2021 - 12:15 p.m.
PYSEC-2021-72
2021-01-0812:15:00
Google
osv.dev
10
pwntools
package
vulnerability
ssti
remote code execution
security
EPSS
0.033
Percentile
91.5%
This affects the package pwntools before 4.3.1. The shellcraft generator for affected versions of this module are vulnerable to Server-Side Template Injection (SSTI), which can lead to remote code execution.
Related
nvd
nvd
CVE-2020-28468
2021-01-08 12:15:12
cve
cve
CVE-2020-28468
2021-01-08 12:15:12
veracode
veracode
Server-Side Template Injection (SSTI)
2021-01-11 06:23:12
github
github
pwntools Server-Side Template Injection (SSTI) vulnerability
2021-04-20 16:13:24
prion
prion
Remote code execution
2021-01-08 12:15:00
osv
osv
pwntools Server-Side Template Injection (SSTI) vulnerability
2021-04-20 16:13:24
CVE-2020-28468
2021-01-08 12:15:12
cvelist
cvelist
CVE-2020-28468 Improper Control of Generation of Code ('Code Injection')
2021-01-08 11:20:13