Security Advisory

CVE-2018-15747

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-06-21 13:06:54

Last updated 2024-08-05 10:01:54

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The default configuration of glot-www through 2018-05-19 allows remote attackers to execute arbitrary code because glot-code-runner supports os.system within a "python" "files" "content" JSON file.

← Browse all CVEs View on cve.org ↗