CVE-2012-5642: FAIL2BAN

High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days.

server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to trigger unsafe behavior in a custom action file via unspecified symbols in this content.

Affected products

• FAIL2BAN FAIL2BAN: up to and including 0.8.7.1; version 0.1.0 only; version 0.1.1 only; version 0.1.2 only; version 0.3.0 only; version 0.3.1 only; …

Published 2012-12-31. Last modified 2026-06-16.