Log in Start free

Vulnerability · Published May 2, 2024 · Assigned by CERT-PL

CVE-2024-3955Arbitrary code execution in CraftBeerPi 4

Critical 9.8

In plain English

A critical-severity code injection in CraftBeerPi 4 from CraftBeerPi - Brewing Controller. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 67% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)1.1%top 33.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

URL GET parameter "logtime" utilized within the "downloadlog" function from "cbpi/http_endpoints/http_system.py" is subsequently passed to the "os.system" function in "cbpi/controller/system_controller.py" without prior validation allowing to execute arbitrary code.This issue affects CraftBeerPi 4: from 4.0.0.58 (commit 563fae9) before 4.4.1.a1 (commit 57572c7).

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
PyPIcbpi44.4.1.a1GHSA-4f92-w438-f484
PyPIcbpi44.4.1.a1PYSEC-2026-308

Affected products (as reported)

VendorProductVersions
PiBrewing CraftBeerPi 4 4.0.0.58 (commit 563fae9) – before 4.4.1.a1 (commit 57572c7)
CraftBeerPi - Brewing Controller CraftBeerPi 4 4.0.0.58 (commit 563fae9) – through *

Weakness: CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References