21Şub
CVE-2024-23346 | materialsproject pymatgen prior 2024.2.20 from_transformation_str command injection
A vulnerability was found in materialsproject pymatgen. It has been rated as critical. Affected by this issue is the functionfrom_transformation_str
. The manipulation leads to command injection.
This vulnerability is handled as CVE-2024-23346. The attack needs to be approached locally. There is no exploit available.
It is recommended to upgrade the affected component.