PyPI/aliyundrive-webdav CVE-2024-29640: high, EPSS 1.18%
aliyundrive-webdav vulnerable to Command Injection
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.3.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-73v2-rxqp-7q4f#PyPI/aliyundrive-webdav
- https://nvd.nist.gov/vuln/detail/CVE-2024-29640
- https://github.com/lakemoon602/vuln/blob/main/detail.md
- https://github.com/messense/aliyundrive-webdav
- https://github.com/messense/aliyundrive-webdav/blob/main/openwrt/luci-app-aliyundrive-webdav/luasrc/controller/aliyundrive-webdav.lua
- http://aliyundrive-webdav.com
CVE-2024-29640 · published · modified · JSON