Описание
The URL dispatch mechanism in TurboGears2 (aka tg2) before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | not-affected | 2.0.3-2 |
| hardy | DNE | |
| karmic | not-affected | 2.0.3-1 |
| lucid | not-affected | 2.0.3-1 |
| maverick | not-affected | 2.0.3-2 |
| upstream | released | 2.0.2 |
Показывать по
10
Ссылки на источники
EPSS
Процентиль: 61%
0.01053
Низкий
7.5 High
CVSS2
Связанные уязвимости
nvd
почти 16 лет назад
The URL dispatch mechanism in TurboGears2 (aka tg2) before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors.
debian
почти 16 лет назад
The URL dispatch mechanism in TurboGears2 (aka tg2) before 2.0.2 expos ...
github
больше 4 лет назад
The URL dispatch mechanism in TurboGears2 (aka tg2) before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors.
EPSS
Процентиль: 61%
0.01053
Низкий
7.5 High
CVSS2