CVEs-PoC/2018/CVE-2018-8097.md

CVE-2018-8097

Description

io/mongo/parser.py in Eve (aka pyeve) before 0.7.5 allows remote attackers to execute arbitrary code via Code Injection in the where parameter.

POC

Reference

• https://github.com/pyeve/eve/issues/1101

Github

• https://github.com/ARPSyndicate/cve-scores
• https://github.com/PuddinCat/GithubRepoSpider
• https://github.com/SilentVoid13/CVE-2018-8097
• https://github.com/SilentVoid13/SilentVoid13
• https://github.com/StellarDriftLabs/CVE-2018-8097-PoC
• https://github.com/plzheheplztrying/cve_monitor