Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2020-7698

Command Injection

Description

This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a Gerapy

  • 0 to < unspecifiedaffected
  • unspecified to < 0.9.3affected

References