CVE-2023-35932

Summary

CVE-2023-35932 is a vulnerability affecting the jcvi Python library used for genome assembly, annotation, and comparative genomics. The issue lies in the library's handling of user input, which can reach the configuration file in an unsanitized format. A malicious user can exploit this configuration injection vulnerability to craft a payload and potentially inject commands. The extent of the impact depends on the specific configuration file and its execution privileges. Unfortunately, a fix for this vulnerability is not currently available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.