En resumen
- CVE-2021-36711 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a octobot, octobot (octobot).
- Probabilidad de explotación en los próximos 30 días (EPSS): 16.6%, mayor que el 97.0% de las vulnerabilidades.
- Solución: actualizar a 0.4.4 o posterior.
| Package | Affected versions | Patched versions |
|---|
| octobot PyPI | < 0.4.4
| 0.4.4
|
| octobot | < 0.4.4
| 0.4.4
|
Description
WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled.
NVD description
WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free