Command injection in Gerapy

CRÍTICO 9.8CVE-2020-7698 · GHSA-g57j-q48p-9vm2 · PYSEC-2020-44 · Published 29/07/2020 · updated 17/06/2026

En resumen

CVE-2020-7698 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a gerapy, gerapy (gerapy).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.7%, mayor que el 77.4% de las vulnerabilidades.
Solución: actualizar a 0.9.3 o posterior.

Package	Affected versions	Patched versions
gerapy PyPI	`< 0.9.3`	`0.9.3`
gerapy gerapy	`≥ 0.0.0, < 0.9.3`	`0.9.3`

This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized.

NVD description

This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

PyPI

< 0.9.3

0.9.3

≥ 0.0.0, < 0.9.3

0.9.3

Description

This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized.

NVD description

This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized.

Más vulnerabilidades de gerapy

Ver todo →