CVE-2018-8097
io/mongo/parser.py in Eve (aka pyeve) before 0.7.5 allows remote attackers to execute arbitrary code via Code Injection in the where parameter.
CVSS 3.0 · 9.8 Critical
EPSS 6.3%
KEV · Not listed
Vendors
Products