📦

jw.util

Vendor: python

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 1 Remote Access
Total CVEs 2 Total Indexed
Avg. EPSS 4.42% Exploit Prob.
Latest CVE CVE-2020-13388 May 22

Security Vulnerability Index

Page 1 / 1
9.8 CVSS
CVE-2020-13388
RCE

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safe_load is not used.

EPSS: 4.42%