Command injection in Gerapy

KRITISCH 9.8CVE-2020-7698 · GHSA-g57j-q48p-9vm2 · PYSEC-2020-44 · Published 29/07/2020 · updated 17/06/2026

Kurz gesagt

CVE-2020-7698 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in gerapy, gerapy (gerapy).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.7%, höher als bei 77.4% aller Schwachstellen.
Abhilfe: auf 0.9.3 oder neuer aktualisieren.

Package	Affected versions	Patched versions
gerapy PyPI	`< 0.9.3`	`0.9.3`
gerapy gerapy	`≥ 0.0.0, < 0.9.3`	`0.9.3`

This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized.

NVD description

This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

PyPI

< 0.9.3

0.9.3

≥ 0.0.0, < 0.9.3

0.9.3

Description

This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized.

NVD description

This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized.

Weitere Schwachstellen in gerapy

Alle anzeigen →