CVE-2023-41334CWE-77

astropy vulnerable to RCE in TranformGraph().to_dot_graph function

High · published March 18, 2024

CVSS v3.1
8.4
EPSS
1%
Percentile
66.2
In the wild
Unconfirmed
What it is

Astropy is a project for astronomy in Python that fosters interoperability between Python astronomy packages. Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the `TranformGraph().to_dot_graph` function. A malicious user can provide a command or a script file as a value to the `savelayout` argument, which will be placed as the first value in a list of arguments passed to `subprocess.Popen`. Although an error will be raised, the command or script will be executed successfully. Version 5.3.3 fixes this issue.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01134 · 66.2th percentile
Weakness
CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published
2024-03-18T18:48Z
EPSS history
Timeline
  • 18 MAR 18:48Z
    astropy vulnerable to RCE in TranformGraph().to_dot_graph function
    cvelistv5