Vulnerability Details CVE-2023-43364
main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.296
EPSS Ranking 96.5%
CVSS Severity
CVSS v3 Score 9.8
References
- https://github.com/ArjunSharda/Searchor/commit/16016506f7bf92b0f21f51841d599126d6fcd15b
- https://github.com/ArjunSharda/Searchor/pull/130
- https://github.com/advisories/GHSA-66m2-493m-crh2
- https://github.com/nexis-nexis/Searchor-2.4.0-POC-Exploit-
- https://github.com/nikn0laty/Exploit-for-Searchor-2.4.0-Arbitrary-CMD-Injection
- https://github.com/ArjunSharda/Searchor/commit/16016506f7bf92b0f21f51841d599126d6fcd15b
- https://github.com/ArjunSharda/Searchor/pull/130
- https://github.com/advisories/GHSA-66m2-493m-crh2
- https://github.com/nexis-nexis/Searchor-2.4.0-POC-Exploit-
- https://github.com/nikn0laty/Exploit-for-Searchor-2.4.0-Arbitrary-CMD-Injection
Products affected by CVE-2023-43364
-
cpe:2.3:a:arjunsharda:searchor:-
-
cpe:2.3:a:arjunsharda:searchor:1.1.1
-
cpe:2.3:a:arjunsharda:searchor:1.2.0
-
cpe:2.3:a:arjunsharda:searchor:1.3.0
-
cpe:2.3:a:arjunsharda:searchor:1.4.0
-
cpe:2.3:a:arjunsharda:searchor:2.0.0
-
cpe:2.3:a:arjunsharda:searchor:2.0.2
-
cpe:2.3:a:arjunsharda:searchor:2.1.0
-
cpe:2.3:a:arjunsharda:searchor:2.1.1
-
cpe:2.3:a:arjunsharda:searchor:2.1.1f
-
cpe:2.3:a:arjunsharda:searchor:2.1.2
-
cpe:2.3:a:arjunsharda:searchor:2.1.2f
-
cpe:2.3:a:arjunsharda:searchor:2.1.3
-
cpe:2.3:a:arjunsharda:searchor:2.1.3f
-
cpe:2.3:a:arjunsharda:searchor:2.1.4
-
cpe:2.3:a:arjunsharda:searchor:2.1.5
-
cpe:2.3:a:arjunsharda:searchor:2.1.6
-
cpe:2.3:a:arjunsharda:searchor:2.2.0
-
cpe:2.3:a:arjunsharda:searchor:2.2.2
-
cpe:2.3:a:arjunsharda:searchor:2.2.3
-
cpe:2.3:a:arjunsharda:searchor:2.3.0
-
cpe:2.3:a:arjunsharda:searchor:2.3.1
-
cpe:2.3:a:arjunsharda:searchor:2.3.2
-
cpe:2.3:a:arjunsharda:searchor:2.4.0
-
cpe:2.3:a:arjunsharda:searchor:2.4.1