CVE-2024-47821
2 advisories.
PyPI/pyload-ng CVE-2024-47821: critical 9.1
pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API
Action: Upgrade pyload-ng to 0.5.0b3.dev87 or later.
pip install pyload-ng==0.5.0b3.dev87Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.0b3.dev87 | - |
Fixed versions
| 0.5.0b3.dev87 |
Sources
- osv: GHSA-w7hq-f2pj-c53g
- https://github.com/pyload/pyload/security/advisories/GHSA-w7hq-f2pj-c53g
- https://nvd.nist.gov/vuln/detail/CVE-2024-47821
- https://github.com/pyload/pyload/commit/48f59567393a19263c8a0285256a7537dc9ce109
- https://github.com/pyload/pyload
- https://github.com/pypa/advisory-database/tree/main/vulns/pyload-ng/PYSEC-2024-302.yaml
CVE-2024-47821 · published · modified · JSON
PyPI/pyload-ng CVE-2024-47821: low 2.3
pyLoad is a free and open-source Download Manager. The folder `/.pyload/scripts` has scripts which are run when certain actions are completed, for e.g. a download is finished. By downloading a executa
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.5.0 |
Fixed versions
No fixed version in the source.
Sources
CVE-2024-47821 · published · modified · JSON