Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Command Injection
Vulnerability Description
The package cookiecutter before 2.1.1 are vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
N/A
Vulnerability Title
Cookiecutter 操作系统命令注入漏洞
Vulnerability Description
Cookiecutter是一个跨平台的命令行实用程序，可以从 cookiecutters（项目模板）创建项目，例如 Python 包项目、C 项目。 Cookiecutter 2.1.1之前版本存在操作系统命令注入漏洞，该漏洞源于容易通过hg参数进行命令注入。
CVSS Information
N/A
Vulnerability Type
N/A