CVE-2023-38941

CriticalCVSS 9.8

Published: 04/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.30%

67th percentile - higher than 67% of all known CVEs

Summary

Version django-sspanel v2022.2.2 was found to contain a remote command execution (RCE) vulnerability in the component sspanel/admin_view.py in the GoodsCreateView._post method.

Risk Assessment

This vulnerability could allow attackers to execute commands remotely on the server, posing a serious security threat to the system.

Recommendation

It is recommended to upgrade to the latest version of django-sspanel to mitigate this vulnerability and conduct a security audit of the application.

Original NVD description (English source)

django-sspanel v2022.2.2 was discovered to contain a remote command execution (RCE) vulnerability via the component sspanel/admin_view.py -> GoodsCreateView._post.