GHSA-vcw3-r3fx-j444: Critical severity pip/aj vulnerability
Impact
An unauthenticated user could gain access to a server to execute arbitrary code on this server.
Patches
This is fixed in the version 2.2.13. Users should upgrade to this version as soon as possible.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
pip/ajto a version that resolves this vulnerability.Fixed in 2.2.13 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.2.13
Event History
Frequently Asked Questions
Who can exploit this issue?
Any unauthenticated remote user can exploit it. The provided vector indicates no privileges or user interaction are required and that it is reachable over the network.
What is the potential impact of successful exploitation?
An attacker could gain access to the server and execute arbitrary code on it. The reported impact includes high confidentiality, integrity, and availability impact.
Which version fixes the issue?
The issue is fixed in version 2.2.13. Users should upgrade to that version as soon as possible.