CVE-2023-0297
Code Injection in pyload/pyload
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
5
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31.
pyLoad versions prior to 0.5.0b3.dev31 are vulnerable to Python code injection due to the pyimport functionality exposed through the js2py library. An unauthenticated attacker can issue a crafted POST request to the flash/addcrypted2 endpoint to leverage this for code execution. pyLoad by default runs two services, the primary of which is on port 8000 and can not be used by external hosts. A secondary Click N Load service runs on port 9666 and can be used remotely without authentication.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-01-14 CVE Reserved
- 2023-01-14 CVE Published
- 2023-02-17 First Exploit
- 2024-08-02 CVE Updated
- 2024-11-02 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-94: Improper Control of Generation of Code ('Code Injection')
CAPEC
References (8)
URL | Tag | Source |
---|---|---|
http://packetstormsecurity.com/files/171096/pyLoad-js2py-Python-Execution.html | ||
http://packetstormsecurity.com/files/172914/PyLoad-0.5.0-Remote-Code-Execution.html |
URL | Date | SRC |
---|---|---|
https://www.exploit-db.com/exploits/51532 | 2023-06-14 | |
https://github.com/Small-ears/CVE-2023-0297 | 2023-02-17 | |
https://github.com/JacobEbben/CVE-2023-0297 | 2023-05-21 | |
https://github.com/overgrowncarrot1/CVE-2023-0297 | 2023-06-15 | |
https://huntr.dev/bounties/3fd606f7-83e1-4265-b083-2e1889a05e65 | 2024-08-02 |
URL | Date | SRC |
---|---|---|
https://github.com/pyload/pyload/commit/7d73ba7919e594d783b3411d7ddb87885aea782d | 2023-06-15 |
URL | Date | SRC |
---|