VULNERABILITY INTELLIGENCE

CVE-2024-28397

CVSS score5.3 MEDIUM
EPSS probability4.55%
CISA KEVNot currently listed
Published2024-06-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references