Skip to content
OpenAdvisories

Product · EDM115

unzip-bot

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-53992

    unzip-bot Allows Remote Code Execution (RCE) via archive extraction, password prompt, or video upload

    unzip-bot is a Telegram bot to extract various types of archives. Users could exploit unsanitized inputs to inject malicious commands that are executed through subprocess.Popen with shell=True. Attackers can exploit this vulnerability using a crafted archive …

    EDM115 unzip-bot