CVE-2021-42969

Certain Anaconda3 2021.05 are affected by OS command injection

published May 13, 2022

CVSS
—
EPSS
2%
Percentile
79.6
In the wild
Unconfirmed
What it is

Certain Anaconda3 2021.05 are affected by OS command injection. When a user installs Anaconda, an attacker can create a new file and write something in usercustomize.py. When the user opens the terminal or activates Anaconda, the command will be executed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01909 · 79.6th percentile
Published
2022-05-13T11:39Z
EPSS history
Timeline
  • 13 MAY 11:39Z
    Certain Anaconda3 2021.05 are affected by OS command injection
    cvelistv5