CyberRota Analysis
AI-GeneratedOpenSSL versions prior to 1.4.0 are vulnerable to a critical plugin sandbox bypass, allowing attackers to circumvent security measures and import dangerous modules such as sys and pickle. This flaw enables arbitrary code execution, posing significant risks to systems utilizing affected OpenSSL versions. Organizations using OpenSSL should prioritize immediate updates to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
openssl_encrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerability where the PluginImportGuard blocks a different set of modules than the AST analyzer's DANGEROUS_MODULES set. Attackers can bypass AST analysis through string obfuscation or encoding to import unblocked dangerous modules like sys, shutil, multiprocessing, importlib, and pickle for arbitrary code execution.
Related CVEs
Other vulnerabilities affecting the same vendor(s)