CVE-2019-7653

PoC —

CVSS 3.1

9.8 critical

EPSS

2%p82

Published

Feb 9, 2019 (Feb 9, 2019)

Modified

Jun 17, 2026

Description

The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because "python -m" looks in this directory, as demonstrated by rdf2dot. This issue is specific to use of the debian/scripts directory.

Vendors: rdflib project debian canonical
Products: rdflib, debian linux, ubuntu linux
Weakness: CWE-427
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.3%)

In the news0 stories

No ingested article mentions this CVE yet.