Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2020-28468

Improper Control of Generation of Code ('Code Injection')

Description

This affects the package pwntools before 4.3.1. The shellcraft generator for affected versions of this module are vulnerable to Server-Side Template Injection (SSTI), which can lead to remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a pwntools

  • unspecified to < 4.3.1affected

References