CVE-2023-0297: Code Injection in pyload/pyload
Published Jan 14, 2023
·Updated
Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31.
Affected Software
1 affected component
pyload pyload<=0.4.20
Remediation
Event History
Jan 14, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-0297?
CVE-2023-0297 is rated as critical due to its potential for remote code execution.
2
How do I fix CVE-2023-0297?
To fix CVE-2023-0297, upgrade your pyload installation to version 0.5.0b3.dev31 or later.
3
What versions are affected by CVE-2023-0297?
CVE-2023-0297 affects all pyload versions prior to 0.5.0b3.dev31.
4
What type of vulnerability is CVE-2023-0297?
CVE-2023-0297 is a code injection vulnerability affecting the pyload application.
5
Who is affected by CVE-2023-0297?
Any user running affected versions of pyload prior to the patched release is at risk due to CVE-2023-0297.