GHSA-6g88-vr3v-76mfCriticalCVSS 9.8
Eval injection in Supybot/Limnoria
🔗 CVE IDs covered (1)
📋 Description
Eval injection in the Math plugin of Limnoria (before 2019.11.09) and Supybot (through 2018-05-09) allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands.
🎯 Affected products1
- pip/limnoria:< 2019.11.09
🔗 References (8)
- https://nvd.nist.gov/vuln/detail/CVE-2019-19010
- https://github.com/ProgVal/Limnoria/commit/3848ae78de45b35c029cc333963d436b9d2f0a35
- https://github.com/ProgVal/Limnoria/wiki/math-eval-vulnerability
- https://github.com/advisories/GHSA-6g88-vr3v-76mf
- https://github.com/pypa/advisory-database/tree/main/vulns/limnoria/PYSEC-2019-102.yaml
- https://lists.fedoraproject.org/archives/list/[email protected]/message/54CQM2TEXRADLE77VOMCPHL5PBHR3ZWJ
- https://lists.fedoraproject.org/archives/list/[email protected]/message/5P2AGND54UIJV3WHOYO2YINIXSDGAAPO
- https://lists.fedoraproject.org/archives/list/[email protected]/message/DRNOUHFEN75QAIKT4Y3HDN3TT5LSIWN2