What’s Vulnerable › Vulnerabilities
CVE-2023-0297: Code Injection in pyload/pyload
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 95.9% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2023-01-14 · updated 2026-06-17
- Weakness: CWE-94
Description
Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31.
Affected products
- pyload/pyload: through 0.4.20
References
- http://packetstormsecurity.com/files/171096/pyLoad-js2py-Python-Execution.html
- http://packetstormsecurity.com/files/172914/PyLoad-0.5.0-Remote-Code-Execution.html
- https://github.com/pyload/pyload/commit/7d73ba7919e594d783b3411d7ddb87885aea782d
- https://huntr.dev/bounties/3fd606f7-83e1-4265-b083-2e1889a05e65
- http://packetstormsecurity.com/files/171096/pyLoad-js2py-Python-Execution.html
- http://packetstormsecurity.com/files/172914/PyLoad-0.5.0-Remote-Code-Execution.html
- https://github.com/pyload/pyload/commit/7d73ba7919e594d783b3411d7ddb87885aea782d
- https://huntr.dev/bounties/3fd606f7-83e1-4265-b083-2e1889a05e65
Get alerted when CVE-2023-0297 or the next vulnerability affects your stack