cve/CVE-2024-28397.md at a8969e132322a214e7b78da5711159d6f891f0ab - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-06-19 17:30:12 +00:00

0xMarcio 3e58935392 Update CVE sources 2024-08-10 19:04

2024-08-10 19:04:30 +00:00

703 B

Raw Blame History

CVE-2024-28397

Description

An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.

POC

Reference

No PoCs from references.

Github