Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Emann

#28505of 53,622
9Total CVSS
Vulnerabilities · 1
PT-2020-14222
9
2020-08-14
Openai · Openapi-Python-Client · CVE-2020-15142
**Name of the Vulnerable Software and Affected Versions** openapi-python-client versions prior to 0.5.3 **Description** The issue allows clients generated with a maliciously crafted OpenAPI Document to generate arbitrary Python code, leading to arbitrary code execution when the malicious client is executed. **Recommendations** For versions prior to 0.5.3, update to version 0.5.3 to resolve the issue. As a temporary workaround, consider inspecting OpenAPI documents before generating clients or inspecting generated code before executing it to minimize the risk of exploitation.