Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Sagemath Subscribe
Filtered by product Sagemathcell
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-17526 1 Sagemath 1 Sagemathcell 2020-08-24 10.0 HIGH 9.8 CRITICAL
** DISPUTED ** An issue was discovered in SageMath Sage Cell Server through 2019-10-05. Python Code Injection can occur in the context of an internet facing web application. Malicious actors can execute arbitrary commands on the underlying operating system, as demonstrated by an __import__('os').popen('whoami').read() line. NOTE: the vendor's position is that the product is "vulnerable by design" and the current behavior will be retained.