CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2020-28468
Critical (9.8) in pwntools project pwntools. EPSS 4.4% chance of exploitation in the next 30 days. Fixed in pwntools 4.3.1.
This affects the package pwntools before 4.3.1. The shellcraft generator for affected versions of this module are vulnerable to Server-Side Template Injection (SSTI), which can lead to remote code execution.
Severity
- EPSS
- 4.4% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
- CWE
- CWE-74
- Published
- Modified
- Record from
- the NVD, synced
Affected
- pwntools_project:pwntools
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-7xc5-ggpp-g249 | PyPI | pwntools | <4.3.1 | 4.3.1 |
| PYSEC-2021-72 | PyPI | pwntools | <4.3.1 | 4.3.1 |