| عنوان | AntaresMugisho PyBlade v0.1.8-alpha through v0.2.0-alph Code Injection |
|---|
| الوصف | This code is vulnerable to CWE-94: Code Injection and CWE-1336: Template Engine Injection due to unsafe expression evaluation in template rendering.
The vulnerability affects v0.1.8-alpha through v0.2.0-alpha through two different mechanisms:
v0.1.8-alpha and v.0.1.9-alpha: The _is_safe_ast() function in sandbox.py contains a logic flaw. The attribute whitelist check only validates ast.Name nodes (e.g., str.method) but bypasses ast.Constant nodes (e.g., ''.__class__), allowing access to dangerous Python magic methods.
v0.2.0-alpha: The evaluator.py file uses eval() directly without any AST validation, providing no security checks at all.
This allows an attacker to achieve Remote Code Execution (RCE) through Python's object model by accessing __class__, __mro__, and __subclasses__ chains. |
|---|
| المصدر | ⚠️ https://github.com/AntaresMugisho/PyBlade/issues/1 |
|---|
| المستخدم | zhangxinyu06 (UID 96407) |
|---|
| ارسال | 19/03/2026 10:42 AM (5 أشهر منذ) |
|---|
| الاعتدال | 04/04/2026 03:54 PM (16 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 355329 [AntaresMugisho PyBlade 0.1.8-alpha/0.1.9-alpha AST Validation sandbox.py _is_safe_ast تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|