Vulnerability · Published Mar 27, 2023 · Assigned by GitHub_M

CVE-2023-28627OS Command Injection via GIT_PATH in pymedusa

High 8.3

In plain English

A high-severity OS command injection in Medusa from pymedusa. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).

Severity (CVSS 3.1)8.3High

Exploit odds (30 days)0.8%top 42.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

pymedusa is an automatic video library manager for TV Shows. In versions prior 1.0.12 an attacker with access to the web interface can update the git executable path in /config/general/ > advanced settings with arbitrary OS commands. An attacker may exploit this vulnerability to take execute arbitrary OS commands as the user running the pymedusa program. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected products (as reported)

Vendor	Product	Versions
pymedusa	Medusa	< 1.0.12

Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

References

https://github.com/pymedusa/Medusa/security/advisories/GHSA-6589-x6f5-cgg9 x_refsource_CONFIRM
https://github.com/pymedusa/Medusa/commit/66d4be8f0872bd5ddcdc5c5a58cb014d22834a45 x_refsource_MISC