Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The shell_quote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "$(" command-substitution sequences, a different vulnerability than CVE-2014-1928. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
python-gnupg 代码注入漏洞
Vulnerability Description
python-gnupg是英国软件开发者Vinay Sajip所研发的一套使用Python API的GNU隐私保护程序。 python-gnupg 0.3.5版本的‘shell_quote’函数中存在安全漏洞，该漏洞源于程序没有正确引用字符串。攻击者可借助shell元字符利用该漏洞执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A