CVE-2015-20107 describes a shell command injection vulnerability in the mailcap module of Python (CPython) versions up to 3.10.8, also affecting Fedora Project and NetApp products. Attackers can inject commands into applications using mailcap.findmatch with untrusted input due to a lack of proper escaping. This vulnerability has a CVSS score of 7.6 (High), indicating it can be exploited remotely with low complexity and user interaction, potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, nor are there public Metasploit or ExploitDB modules, though it has received some community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 3.7.0, <= 3.7.15CPE matchmatch criteria | cpe:2.3:a:python:python:*:*:*:*:*:*:*:* | ||
>= 3.8.0, <= 3.8.15CPE matchmatch criteria | cpe:2.3:a:python:python:*:*:*:*:*:*:*:* | ||
>= 3.9.0, <= 3.9.15CPE matchmatch criteria | cpe:2.3:a:python:python:*:*:*:*:*:*:*:* | ||
>= 3.10.0, < 3.10.8CPE matchmatch criteria | cpe:2.3:a:python:python:*:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
HP ThinPro 8.1 SP4 Security Updates
Oct 29, 2024HP ThinPro 8.1 SP4 Security Updates
Oct 29, 2024February Third Party Package Updates in Splunk Enterprise
Feb 14, 2023In Python (aka CPython) up to 3.10.8 the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input (if they lack validation of user-provided filenames or arguments). The fix is also back-ported to 3.7 3.8 3.9
Apr 12, 2022python: mailcap: findmatch() function does not sanitize the second argument
Aug 2, 2015