The shell_quote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "$…
CVSS 2.0HIGH 7.5·Network·No auth·Interaction —·EPSS 0.03417·Published 2014-10-25·Fixed in 0.3.6CWE-20
The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated usin…
CVSS 2.0MEDIUM 4.6·Local·No auth·Interaction —·EPSS 0.0061·Published 2014-10-25·Fixed in 0.3.6CWE-20
python-gnupg 0.3.5 and 0.3.6 allows context-dependent attackers to have an unspecified impact via vectors related to "option injection through positional arguments." NOTE: this vulnerability exists because of an incomple…
CVSS 2.0MEDIUM 4.4·Local·No auth·Interaction —·EPSS 0.00386·Published 2014-10-25·Fixed in 0.3.7CWE-20