Description
python-dbusmock before version 0.15.1 AddTemplate() D-Bus method call or DBusTestCase.spawn_server_template() method could be tricked into executing malicious code if an attacker supplies a .pyc file.
References (1)
Core 1
Core References
Patch, Third Party Advisory x_refsource_misc
https://github.com/martinpitt/python-dbusmock/commit/4e7d0df9093
Scores
CVSS v3
5.7
EPSS
0.0181
EPSS Percentile
76.1%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Details
CWE
CWE-20
Status
published
Products (2)
pypi/python-dbusmock
0 - 0.15.1PyPI
python-dbusmock_project/python-dbusmock
< 0.15.1
Published
Apr 22, 2019
Tracked Since
Feb 18, 2026