An issue in the component /models/config.py of Whoogle search v0.9.0 allows attackers to execute arbitrary code via supplying a crafted search query.
{
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53305.json"
}{
"extracted_events": [
{
"cpe": "cpe:2.3:a:benbusby:whoogle_search:0.9.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0.9.0"
},
{
"last_affected": "0.9.0"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "223f00c3c0533423114f99b30c561278bc0b42ba"
}
],
"source": "REFERENCES_COMMIT"
}
]
}