~ / search / GHSA-w873-xcqq-x922

GHSA-w873-xcqq-x922

Command Injection in Simiki

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-19001

Packages

EcosystemPackageAffectedFixed in
PyPI simiki < 1.6.2.2 1.6.2.2

Details

As written in the advisory (Markdown source, shown as plain text).

Command Injection in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitrary system commands via line 64 of the component 'simiki/blob/master/simiki/config.py'.

References

External links from the advisory. They lead to third-party sites.