CyberSecBulletin

PiBrewing vulnerabilities

We track 1 vulnerability in PiBrewing products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 2, 2024.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest PiBrewing vulnerabilities

  • 9.8 Critical severity

    CraftBeerPi 4: Improper Control of Generation of Code

    CVE-2024-3955PiBrewingEPSS 1.15%

    URL GET parameter "logtime" utilized within the "downloadlog" function from "cbpi/http_endpoints/http_system.py" is subsequently passed to the "os.system" function in "cbpi/controller/system_controller.py" without prior validation allowing to execute arbitrary