Description
FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project Manager Load Template flow passes attacker-controlled FCStd Meta property values for wpposition, wpu, wpv, and wpaxis directly to eval(), allowing arbitrary Python code execution when a user loads a malicious BIM project template. This issue is fixed in version 1.1.1.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
FreeCAD FreeCAD
>= 0.19, < 1.1.1affected
References
- https://github.com/FreeCAD/FreeCAD/security/advisories/GHSA-8rfj-7956-6gwf ↗
- https://github.com/FreeCAD/FreeCAD/pull/28610 ↗
- https://github.com/FreeCAD/FreeCAD/commit/871ee19b76224910332bbfbd39eebbede967998b ↗
- https://github.com/FreeCAD/FreeCAD/commit/9ed351cc4700db0a94c46f020c34c58bbf1bdaba ↗
- https://github.com/FreeCAD/FreeCAD/releases/tag/1.1.1 ↗