Homepage
About Snyk

cbpi4@4.0.5a14 vulnerabilities

CraftBeerPi4 Brewing Software

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the cbpi4 package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Arbitrary Code Injection

cbpi4 is a CraftBeerPi4 Brewing Software

Affected versions of this package are vulnerable to Arbitrary Code Injection via the logtime parameter to a GET request, which is passed directly to os.system() and executed.

How to fix Arbitrary Code Injection?

Upgrade cbpi4 to version 4.4.1 or higher.

[,4.4.1)
Go back to all versions of this package