OS Command Injection Vulnerability in aops-ceres on Linux

CVE-2021-33633

What is CVE-2021-33633?

A vulnerability exists in the openEuler aops-ceres software where improper neutralization of special elements used in OS commands can lead to command injection. This issue specifically affects the program file located at ceres/function/util.Py, allowing attackers to execute arbitrary commands on the host system running the affected versions, ranging from 1.3.0 to 1.4.1. Vigilance is required to mitigate risks associated with this flaw, particularly in environments where aops-ceres is operational.

References