Cookiecutter
1 CVEs
product
Monthly
The package cookiecutter before 2.1.1 are vulnerable to Command Injection via hg argument injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Python
Command Injection
Fedora
Cookiecutter
Fedoraproject
NVD
GitHub
CVSS 3.1
9.8
EPSS
4.2%
CVE-2022-24065
PyPI
EPSS 4%
CVSS 9.8
CRITICAL
POC
PATCH
Act Now
The package cookiecutter before 2.1.1 are vulnerable to Command Injection via hg argument injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Python
Command Injection
Fedora
+2
NVD
GitHub