CVE-2023-24107: Hour Of Code Python 2015 Project Hour Of Code Python 2015

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

hour_of_code_python_2015 commit 520929797b9ca43bb818b2e8f963fb2025459fa3 was discovered to contain a code execution backdoor via the request package (requirements.txt). This vulnerability allows attackers to access sensitive user information and execute arbitrary code.

Affected products

• Hour Of Code Python 2015 Project Hour Of Code Python 2015: version 2015-12-11 only

Published 2023-02-22. Last modified 2026-06-17.