Vulnerability CVE-2023-0297
Published: 2023-01-14

Description:
Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31.

See advisories in our WLB2 database:
Topic
Author
Date
High
pyLoad js2py Python Execution
Spencer McIntyre
22.02.2023

Type:

CWE-94

 (Improper Control of Generation of Code ('Code Injection'))

 References:
https://github.com/pyload/pyload/commit/7d73ba7919e594d783b3411d7ddb87885aea782d
https://huntr.dev/bounties/3fd606f7-83e1-4265-b083-2e1889a05e65
Copyright 2024, cxsecurity.com

 

Back to Top