Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Nikn0Laty

#25155of 53,634
9.8Total CVSS
Vulnerabilities · 1
PT-2023-28807
9.8
2023-09-25
Searchor · Searchor · CVE-2023-43364
**Name of the Vulnerable Software and Affected Versions** Searchor versions prior to 2.4.2 **Description** The issue allows an attacker to execute arbitrary code via a crafted script to the `eval()` function in Searchor's `main.py` file, affecting the search feature in Searchor's Command Line Interface. This may cause unexpected code execution. **Recommendations** For versions prior to 2.4.2, update to version 2.4.2 or later to resolve the issue. As a temporary workaround, consider disabling the `eval()` function in `main.py` until a patch is available. Restrict access to the `main.py` file to minimize the risk of exploitation. Avoid using the `eval()` function in the Command Line Interface until the issue is resolved.