CVE-2022-30286 - pyscriptjs (aka PyScript Demonstrator) in PyScript through 2022-05-04 allows a remote user to read Python source code

HIGH

pyscriptjs (aka PyScript Demonstrator) in PyScript through 2022-05-04 allows a remote user to read Python source code

Published May 9, 2022

7.5

HIGH

CVSS 3.1

EPSS 13.64%

pyscriptjs (aka PyScript Demonstrator) in PyScript through 2022-05-04 allows a remote user to read Python source code.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
http://packetstormsecurity.com/files/167069/PyScript-2022-05-04-Alpha-Source-Code-Disclosure.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://cyber-guy.gitbook.io/cyber-guy/blogs/the-art-of-vulnerability-chaining-pyscript		x_refsource_MISCExploitThird Party Advisory
https://cyber-guy.gitbook.io/cyber-guy/pocs/pyscript-file-read		x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-52238		Advisory
https://github.com/pyscript/pyscript/commits/main		x_refsource_MISCPatchThird Party Advisory
https://www.exploit-db.com/exploits/50918		x_refsource_MISCExploitThird Party AdvisoryVDB Entry