Critical severity9.8NVD Advisory· Published Feb 22, 2023· Updated Jun 17, 2026

CVE-2023-24107

Description

hour_of_code_python_2015 commit 520929797b9ca43bb818b2e8f963fb2025459fa3 was discovered to contain a code execution backdoor via the request package (requirements.txt). This vulnerability allows attackers to access sensitive user information and execute arbitrary code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Hour Of Code Python 2015 Project/Hour Of Code Python 2015
cpe:2.3:a:hour_of_code_python_2015_project:hour_of_code_python_2015:2015-12-11:*:*:*:*:*:*:*
hour_of_code_python_2015/hour_of_code_python_2015description
Jminh/hour_of_code_python_2015llm-create
Range: commit 520929797b9ca43bb818b2e8f963fb2025459fa3

Patches

Vulnerability mechanics

References

github.com/jminh/hour_of_code_python_2015/issues/4nvdExploitIssue Tracking
mirrors.neusoft.edu.cn/pypi/web/simple/request/nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000