CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2020-19001
Critical (9.8) in simiki project simiki. EPSS 4.3% chance of exploitation in the next 30 days. Fixed in simiki 1.6.2.2.
Command Injection in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitrary system commands via line 64 of the component 'simiki/blob/master/simiki/config.py'.
Severity
- EPSS
- 4.3% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
- CWE
- CWE-77
- Published
- Modified
- Record from
- the NVD, synced
Affected
- simiki_project:simiki
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-w873-xcqq-x922 | PyPI | simiki | <1.6.2.2 | 1.6.2.2 |
| PYSEC-2021-348 | PyPI | simiki | <1.6.2.2 | 1.6.2.2 |