CVE-2013-7416

canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute...

7.5 High

canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a feed.

Exploit likelihood

2.85%Up 1.7 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a feed.

Record: CVE-2013-7416
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-77
Updated: 2026-11-02

CVE List No score

canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a feed.

Record: CVE-2013-7416
Updated: 2026-11-02

EUVDEUVD-2013-7180 No score

canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a feed.

Record: EUVD-2013-7180
Updated: 2026-11-03

GitHub AdvisoriesGHSA-pg8j-phhv-cggg No score

canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute...

canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a feed.

Record: GHSA-pg8j-phhv-cggg
Weakness: CWE-77
Updated: 2026-11-02

Affected products

canto curses

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-7416 is a high vulnerability (CVSS 7.5) in Canto Curses, published December 3, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.85%, the 86th percentile. No source names a fixed version.

Exploit likelihood

What each source reports

Affected products

History

In short

References