Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-vxf2-7rc3-pxmx
Advisory ID github_osv/GHSA-vxf2-7rc3-pxmx
Aliases CVE-2005-1632
Summary Cheetah Path Search Order Hijacking Cheetah 0.9.15 and 0.9.16 searches the `/tmp` directory for modules before using the paths in the `PYTHONPATH` variable, which allows local users to execute arbitrary code via a malicious module in `/tmp/`.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (1)
CWE-427 Uncontrolled Search Path Element
System Score Found at
generic_textual HIGH
Reference id Reference type URL
https://github.com/cheetahtemplate/cheetah
https://web.archive.org/web/20050430021153/http://sourceforge.net/mailarchive/forum.php?thread_id=7070332&forum_id=1542
CVE-2005-1632 https://nvd.nist.gov/vuln/detail/CVE-2005-1632
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.