CVE-2019-17626 in ReportLabИнформация

Сводка

по VulDB • 22.09.2026

ReportLab fino alla versione 3.5.26 consente l'esecuzione di codice remoto (RCE) a causa della funzione `toColor(eval(arg))` presente nel file colors.py, come dimostrato da un documento XML manipolato contenente `<span color="` seguito da codice Python arbitrario.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Резервировать

16.10.2019

Модерация

принято

Вход

VDB-143519

EPSS

0.10231

KEV

Нет

Деятельности

Очень низкий

Сектор

Energy, Telecommunication, ...

Источники

MITREhttps://www.cve.org/CVERecord?id=CVE-2019-17626
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2019-17626
CVE Detailshttps://www.cvedetails.com/cve/CVE-2019-17626/

◂ ПредыдущийОбзорДалее ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!