Detections
Analytics

CVE-2024-28397

high

Description

An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.

References

https://github.com/y0naldez/CVE-2024-28397-Js2Py-RCE

https://github.com/xeloxa/CVE-2024-28397-Js2Py-RCE-Exploit

https://github.com/3z-p0wn/CVE-2024-28397-exploit

https://github.com/Try4gainToBanMe/CVE

https://github.com/bj715/TDCVES

https://github.com/0xPadme/CVE-2024-28397-Reverse-Shell

https://github.com/vitaciminIPI/CVE-2024-28397-RCE

https://github.com/0xDTC/js2py-Sandbox-Escape-CVE-2024-28397-RCE

https://github.com/naclapor/CVE-2024-28397

https://github.com/kyl0-ST12/CVE_2024_28397---js2py-RCE

https://github.com/harutomo-jp/CVE-2024-28397-RCE

https://github.com/0timeday/exploit-js2py

https://github.com/BOI1000/CVEs

https://github.com/Marven11/CVE-2024-39205-Pyload-RCE

https://github.com/Marven11/CVE-2024-28397-js2py-Sandbox-Escape

https://github.com/Marven11

Details

Source: Mitre, NVD

Published: 2024-06-20

Updated: 2026-04-15

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 5.3

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Severity: Medium

CVSS v4

Base Score: 8.7

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Severity: High

EPSS

EPSS: 0.04548