CVE-2023-35932 is a configuration injection vulnerability affecting the jcvi Python library, which facilitates genome assembly and genomics. This flaw allows a malicious actor to inject unsanitized input into configuration files, potentially leading to command injection. Rated 8.8 HIGH on the CVSS scale, it presents a significant risk with high impact on confidentiality, integrity, and availability, requiring low privileges and no user interaction for exploitation. Currently, there is no known fix, and no public exploit intelligence, active exploitation, or significant community discussion has been observed.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 1.3.5CPE matchmatch criteria | cpe:2.3:a:jcvi_project:jcvi:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.