CVE-2020-15142: 
Python vulnerability analysis and mitigation

In openapi-python-client before version 0.5.3, clients generated with a maliciously crafted OpenAPI Document could generate arbitrary Python code. When this malicious client code is executed, it results in arbitrary code execution on the system (GitHub Advisory).

The vulnerability exists in the code generation process where the generator fails to properly sanitize and validate input from OpenAPI documents. This allows attackers to inject malicious code through various OpenAPI document fields that get translated into Python code. The vulnerability has been assigned a CVSS score of 8.0 (High) with the following vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:P/RL:U/RC:C (GitHub Advisory).

The vulnerability allows attackers to execute arbitrary code on systems where the maliciously generated client is executed. This could lead to complete system compromise, data theft, or service disruption (GitHub Advisory).

Exploitation requires an attacker to craft a malicious OpenAPI document and convince a user to generate and execute a client from it. The attack requires some user interaction and has high complexity, but could result in significant impact if successfully executed (GitHub Advisory).

Users should upgrade to version 0.5.3 or later which includes fixes for this vulnerability. As a workaround, users should inspect OpenAPI documents before generating clients, or inspect generated code before executing it (GitHub Advisory).