io/mongo/parser.py in Eve (aka pyeve) before 0.7.5 allows remote attackers to execute arbitrary code via Code Injection in the where parameter.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2018-03-14T12:00:00

Updated: 2024-08-05T06:46:13.224Z

Reserved: 2018-03-13T00:00:00

Link: CVE-2018-8097

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-03-14T12:29:00.210

Modified: 2024-11-21T04:13:15.170

Link: CVE-2018-8097

cve-icon Redhat

No data.