Skip to content
OpenAdvisories
High · 8.1 CVE-2020-7698 EUVD-2020-0083GHSA-g57j-q48p-9vm2PYSEC-2020-44SNYK-PYTHON-GERAPY-572470

Command Injection

Published Jul 29, 2020 · Updated Sep 17, 2024 · Assigned by snyk

Description

This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized.

Affected products

VendorProductAffectedFixed
— Gerapy < unspecified, unspecified – < 0.9.3 unspecified

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI gerapy < 0.9.3 0.9.3 GHSA-g57j-q48p-9vm2

References