Command Injection in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitrary system commands via line 64 of the component 'simiki/blob/master/simiki/config.py'.
References
Link | Resource |
---|---|
https://cwe.mitre.org/data/definitions/77.html | Technical Description |
https://github.com/tankywoo/simiki/issues/123 | Exploit Issue Tracking Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2021-08-27T18:16:48
Updated: 2022-07-10T20:16:56
Reserved: 2020-08-13T00:00:00
Link: CVE-2020-19001
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-08-27T19:15:07.400
Modified: 2022-09-20T20:57:50.263
Link: CVE-2020-19001
JSON object: View
Redhat Information
No data.
CWE