7.2
Élevée
CVE-2026-7246 This CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability by the Pallets…
Description
This CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability by the Pallets Click project. The original CVE record description is preserved below: Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Click 8.3 | premières → < 8.3.3 | 8.3.3 |
| Red Hat Ansible Automation Platform 2.6 for RHEL 10 | Versions non publiées | |
| Red Hat Ansible Automation Platform 2.5 for RHEL 8 | Versions non publiées | |
| Red Hat Ansible Automation Platform 2.5 for RHEL 9 | Versions non publiées | |
| Red Hat Ansible Automation Platform 2.6 for RHEL 9 | Versions non publiées | |
| Red Hat Ansible Automation Platform 2 | Versions non publiées |
Références
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification