Remote Code Execution (RCE)

2022-09-2005:01:35

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

remote code execution

d8s-math

library

insecure package upload

vulnerability

EPSS

0.003

Percentile

69.3%

JSON

d8s-math is vulnerable to remote code execution. The vulnerability exists because the library does not properly handle the package upload mechanism, allowing an attacker to inject and execute malicious packages

References

github.com/democritus-project/d8s-math/commit/33021a253027e440a55b4bf2c815af8340119e94

github.com/democritus-project/d8s-math/issues/11

pypi.org/project/d8s-math/

pypi.org/project/democritus-strings/

EPSS

0.003

Percentile

69.3%

JSON

Related for VERACODE:37177