CVE-2018-8097

Description

io/mongo/parser.py in Eve (aka pyeve) before 0.7.5 allows remote attackers to execute arbitrary code via Code Injection in the where parameter.

Base Score

9.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

19.107

Vulnerability	OS Platform
Vulnerabilities CVE-2018-8097 are fixed in Python-eve 0.7.5	Windows
Vulnerabilities CVE-2018-8097 are fixed in Python-eve for linux 0.7.5	Linux

No records found