pyload/pyload - RCE (CVE-2023-0297)
Description
Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31.
psychologyCrowdSec Analysis
CVE-2023-0297 is a critical code injection vulnerability affecting PyLoad, which may allow attackers to execute arbitrary code by sending crafted requests to the application.
CrowdSec has been tracking this vulnerability and its exploits since 7th of April 2025.
CrowdSec network observations suggest that most exploitation of CVE-2023-0297 involves focused reconnaissance to identify viable targets. Attackers typically tailor their campaigns based on system exposure and configuration. It is unlikely that a given attack is accidental. In addition, according to the CrowdSec network, attack volume against CVE-2023-0297 has dipped slightly compared to the previous week. Although still commonly targeted, the decline suggests a cooling-off period. Long-term relevance remains, but attention is waning.
Attackers are primarily sending requests to URLs containing /flash/addcrypted2 in order to exploit this vulnerability.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2023-01-14 |
| Rule Released | 2025-04-07 |
| CrowdSec First Seen | 2025-04-07 |