This repository was archived by the owner on Jan 10, 2023. It is now read-only.

This repository was archived by the owner on Jan 10, 2023. It is now read-only.

Code injection #38

Open

QiAnXinCodeSafe

opened

on Jul 28, 2020

IntelSEAPI/runtool/sea_runtool.py

Line 580 in 88a56e0

tree["process"] = eval(file.read())

Python allows users to execute instructions dynamically. When this function is exploited by malicious users, a dynamic code parsing attack will occur

Metadata

Assignees

No one assigned

Labels

No labels

No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests