Skip to content
OpenAdvisories

Package · PyPI

cbpi4

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2024-3955

    Arbitrary code execution in CraftBeerPi 4

    URL GET parameter "logtime" utilized within the "downloadlog" function from "cbpi/http_endpoints/http_system.py" is subsequently passed to the "os.system" function in "cbpi/controller/system_controller.py" without prior validation allowing to execute arbitrar…

    PiBrewing CraftBeerPi - Brewing Controller CraftBeerPi 4 CraftBeerPi 4 PyPI