Description (CNA)
This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Gerapy | affected 0 before unspecified; affected unspecified before 0.9.3 |
CWE
No CWE identifiers supplied.
References
- https://snyk.io/vuln/SNYK-PYTHON-GERAPY-572470
- https://github.com/Gerapy/Gerapy/commit/e8446605eb2424717418eae199ec7aad573da2d2
ADP enrichment
No English description supplied.