Arbitrary Code Execution

2022-09-2012:59:24

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

arbitrary code execution

d8s_strings

vulnerability

democritus-hypothesis package

injection

malicious codes

software

0.003 Low

EPSS

Percentile

69.3%

JSON

d8s_strings is vulnerable to arbitrary code execution. The vulnerability exists because the democritus-hypothesis package of a specific version of d8s_strings acts as a potential code execution backdoor which allows an attacker to inject and execute malicious codes in to the system.

CPENameOperatorVersion
d8s-stringseq0.1.0
d8s-stringseq0.1.0

CPE	Name	Operator	Version
	d8s-strings	eq	0.1.0
	d8s-strings	eq	0.1.0

References

github.com/advisories/GHSA-4582-ff6x-w32x

github.com/democritus-project/d8s-strings/commit/90975d5c2dea3a28e7b7610da5a6aee88f56ed1f

github.com/democritus-project/d8s-strings/issues/21

pypi.org/project/d8s-strings/

pypi.org/project/d8s-strings/0.1.0/#files

pypi.org/project/democritus-hypothesis/

0.003 Low

EPSS

Percentile

69.3%

JSON

Related for VERACODE:37200