Description
An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a crafted string.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | ait-core | <= 2.5.2 | — | GHSA-4gxj-5mmr-7pxq |
High · 7.5
CVE-2024-35058
EUVD-2024-1412GHSA-4gxj-5mmr-7pxqPYSEC-2026-261
NASA AIT-Core vulnerable to remote code execution
Published May 21, 2024 · Updated Aug 2, 2024 · Assigned by mitre