What’s Vulnerable › Vulnerabilities

CVE-2023-24108

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-02-22 · updated 2026-06-17
• Weakness: CWE-912

Description

MvcTools 6d48cd6830fc1df1d8c9d61caa1805fd6a1b7737 was discovered to contain a code execution backdoor via the request package (requirements.txt). This vulnerability allows attackers to access sensitive user information and execute arbitrary code.

Affected products

• Zetacomponents Mvctools: 2008-09-23

References

• https://github.com/zetacomponents/MvcTools/
• https://github.com/zetacomponents/MvcTools/issues/12
• https://mirrors.neusoft.edu.cn/pypi/web/simple/request/
• https://github.com/zetacomponents/MvcTools/
• https://github.com/zetacomponents/MvcTools/issues/12
• https://mirrors.neusoft.edu.cn/pypi/web/simple/request/

Get alerted when CVE-2023-24108 or the next vulnerability affects your stack