CVE-2018-1000523

Description

topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in Injection of arbitrary bytes to the terminal, including terminal escape code sequences. This attack appear to be exploitable via The victim must open a todo.txt with at least one specially crafted line..

Risk Information

Base Score

8.1

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

EPSS Score

Exploitation Probability

0.285

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2018-1000523 are affected in Python-topydo 0.13	Windows
Vulnerabilities CVE-2018-1000523 are affected in Python-topydo for linux 0.13	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234