NASA AIT-Core vulnerable to remote code execution · CVE-2024-35057 · GitHub Advisory Database · GitHub

NASA AIT-Core vulnerable to remote code execution

High severity GitHub Reviewed Published May 21, 2024 to the GitHub Advisory Database • Updated Aug 2, 2024

Package

ait-core (pip)

Affected versions

<= 2.5.2

Patched versions

None

Description

An issue in NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via a crafted packet.

References

Published by the National Vulnerability Database

May 21, 2024

Published to the GitHub Advisory Database May 21, 2024

Last updated Aug 2, 2024

Reviewed Aug 2, 2024