Read the docs

Click Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Click Project records in CISA KEV

No Click Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Click 1 record MEDIUM

Records

1 record in Click · all components

TI-2015-07217 CVE-2015-8768 · GHSA-fgm2-j3wp-hrw5

click/install.py in click does not require files in package filesystem tarballs to start…

Priority MEDIUM 47

click/install.py in click does not require files in package filesystem tarballs to start with ./ (dot slash), which allows remote attackers to install an alternate security policy and gain privileges via a crafted packag…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02746 Published 2017-02-13 No fix listed CWE-264
Open these records in search →