CVE-2013-7489

Опубликовано: 26 июн. 2020

Источник: nvd

CVSS3: 6.8

CVSS2: 5.2

EPSS Низкий

Описание

The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=1850105
Issue Tracking
Third Party Advisory
https://github.com/bbangert/beaker/issues/191
Third Party Advisory
https://www.openwall.com/lists/oss-security/2020/05/14/11
Mailing List
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1850105
Issue Tracking
Third Party Advisory
https://github.com/bbangert/beaker/issues/191
Third Party Advisory
https://www.openwall.com/lists/oss-security/2020/05/14/11
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:beakerbrowser:beaker:*:*:*:*:*:python:*:*

Версия до 1.11.0 (включая)

EPSS

Процентиль: 15%

0.00049

Низкий

6.8 Medium

CVSS3

5.2 Medium

CVSS2

Дефекты

CWE-502

Связанные уязвимости

CVE-2013-7489

CVSS3: 6.8

ubuntu

больше 5 лет назад

The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution.

CVE-2013-7489

CVSS3: 5.7

redhat

больше 5 лет назад

The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution.

CVE-2013-7489

CVSS3: 6.8

debian

больше 5 лет назад

The Beaker library through 1.11.0 for Python is affected by deserializ ...

GHSA-3cwm-7jmm-774w

github

почти 4 года назад

Deserialization of Untrusted Data in Beaker

EPSS

Процентиль: 15%

0.00049

Низкий

6.8 Medium

CVSS3

5.2 Medium

CVSS2

Дефекты

CWE-502