CVE-2018-8097

Published Mar 14, 2018·Updated Jun 16, 2026

NVD Description

io/mongo/parser.py in Eve (aka pyeve) before 0.7.5 allows remote attackers to execute arbitrary code via Code Injection in the where parameter.

PoC: CVE-2018-8097-PoC

POC for CVE-2018-8097 This script exploits CVE-2018-8097 and can retrieve files and contents using a blind RCE method.

PoC: CVE-2018-8097

CVE-2018-8097 PoC

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Get alerted for CVEs like this