CVE-2021-23422

Description

This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing Inline Tag Command metadata is processed. When an arbitrary OS command is executed, the command output would be included in the HTML output.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.203

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2021-23422,CVE-2021-23423 are fixed in Python-bikeshed 3.0.0	Windows
Vulnerabilities CVE-2021-23422,CVE-2021-23423 are fixed in Python-bikeshed for linux 3.0.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234