CVE-2022-27177

CRITICAL

Netflix Consoleme < 1.2.2 - Format String Vulnerability

Title source: rule
STIX 2.1

Description

A Python format string issue leading to information disclosure and potentially remote code execution in ConsoleMe for all versions prior to 1.2.2

References (1)

Scores

CVSS v3 9.8
EPSS 0.0214
EPSS Percentile 84.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-134
Status published
Products (2)
netflix/consoleme < 1.2.2
pypi/consoleme 0 - 1.2.2PyPI
Published Apr 01, 2022
Tracked Since Feb 18, 2026