CVE-2023-24108: Zetacomponents Mvctools

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

MvcTools 6d48cd6830fc1df1d8c9d61caa1805fd6a1b7737 was discovered to contain a code execution backdoor via the request package (requirements.txt). This vulnerability allows attackers to access sensitive user information and execute arbitrary code.

Affected products

• Zetacomponents Mvctools: version 2008-09-23 only

Published 2023-02-22. Last modified 2026-06-17.