CVE-2023-41419

Опубликовано: 25 сент. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.

Ссылки

https://github.com/gevent/gevent/commit/2f53c851eaf926767fbac62385615efd4886221c
Patch
https://github.com/gevent/gevent/issues/1989
Exploit
Issue Tracking
Third Party Advisory
https://github.com/gevent/gevent/commit/2f53c851eaf926767fbac62385615efd4886221c
Patch
https://github.com/gevent/gevent/issues/1989
Exploit
Issue Tracking
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2025/11/msg00020.html

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gevent:gevent:*:*:*:*:*:*:*:*

Версия до 23.9.0 (исключая)

EPSS

Процентиль: 88%

0.0388

Низкий

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2023-41419

CVSS3: 9.8

ubuntu

больше 2 лет назад

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.

CVE-2023-41419

CVSS3: 9.1

redhat

больше 2 лет назад

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.

CVE-2023-41419

CVSS3: 9.8

msrc

больше 2 лет назад

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.

CVE-2023-41419

CVSS3: 9.8

debian

больше 2 лет назад

An issue in Gevent before version 23.9.0 allows a remote attacker to e ...

SUSE-SU-2023:4091-1

suse-cvrf

больше 2 лет назад

Security update for python-gevent

EPSS

Процентиль: 88%

0.0388

Низкий

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo