PT-2020-19721 · Gerapy · Gerapy

CVE-2020-7698

Published

2020-07-29

Updated

2021-07-21

CVSS v3.1

9.8

Critical

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Gerapy versions 0 through 0.9.3

Description The issue arises from unsanitized input being passed to Popen via the "project configure" endpoint.

Recommendations For Gerapy versions 0 through 0.9.3, update to version 0.9.3 or later to resolve the issue.

Fix

Special Elements Injection

OS Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2020-7698

GHSA-G57J-Q48P-9VM2

PYSEC-2020-44

SNYK-PYTHON-GERAPY-572470

Gerapy