CVE-2024-5023
2 advisories.
PyPI/consoleme CVE-2024-5023: critical 9.6
ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command
Action: Upgrade consoleme to 1.4.0 or later.
pip install consoleme==1.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.0 | - |
Fixed versions
| 1.4.0 |
Sources
- osv: GHSA-3783-62vc-jr7x
- https://github.com/Netflix/consoleme/security/advisories/GHSA-3783-62vc-jr7x
- https://nvd.nist.gov/vuln/detail/CVE-2024-5023
- https://github.com/Netflix/consoleme/pull/9380
- https://github.com/Netflix/consoleme/commit/2795a2bd553938a21c0643b37452971625ce67f5
- https://github.com/Netflix/consoleme
- https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2024-002.md
CVE-2024-5023 · published · modified · JSON
PyPI/consoleme CVE-2024-5023: critical 9.6
ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command
Action: Upgrade consoleme to 1.4.0 or later.
pip install consoleme==1.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.0 | - |
Fixed versions
| 1.4.0 |
Sources
- osv: PYSEC-2026-318
- https://github.com/Netflix/consoleme/security/advisories/GHSA-3783-62vc-jr7x
- https://nvd.nist.gov/vuln/detail/CVE-2024-5023
- https://github.com/Netflix/consoleme/pull/9380
- https://github.com/Netflix/consoleme/commit/2795a2bd553938a21c0643b37452971625ce67f5
- https://github.com/Netflix/consoleme
- https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2024-002.md
- https://pypi.org/project/consoleme
- https://github.com/advisories/GHSA-3783-62vc-jr7x
CVE-2024-5023 · published · modified · JSON