CVE-2013-4409 ReviewBoard and Djblets library are vulnerable to code execution
CriticalCVSS 9.8
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi djblets(PyPI) | < 0.6.30 | 0.6.30 |
| pypi djblets(PyPI) | = 0.5 | No fix listed |
| pypi djblets(PyPI) | = 0.5.1 | No fix listed |
| pypi djblets(PyPI) | = 0.5.2 | No fix listed |
| pypi djblets(PyPI) | = 0.5.3 | No fix listed |
| pypi djblets(PyPI) | = 0.5.4 | No fix listed |
| pypi djblets(PyPI) | = 0.5.5 | No fix listed |
| pypi djblets(PyPI) | = 0.5.6 | No fix listed |
| pypi djblets(PyPI) | = 0.5.7 | No fix listed |
| pypi djblets(PyPI) | = 0.5.8 | No fix listed |
| pypi djblets(PyPI) | = 0.5.9 | No fix listed |
| pypi djblets(PyPI) | = 0.5rc2 | No fix listed |
| pypi djblets(PyPI) | = 0.6 | No fix listed |
| pypi djblets(PyPI) | = 0.6.1 | No fix listed |
| pypi djblets(PyPI) | = 0.6.10 | No fix listed |
| pypi djblets(PyPI) | = 0.6.11 | No fix listed |
| pypi djblets(PyPI) | = 0.6.12 | No fix listed |
| pypi djblets(PyPI) | = 0.6.13 | No fix listed |
| pypi djblets(PyPI) | = 0.6.14 | No fix listed |
| pypi djblets(PyPI) | = 0.6.15 | No fix listed |
| pypi djblets(PyPI) | = 0.6.16 | No fix listed |
| pypi djblets(PyPI) | = 0.6.17 | No fix listed |
| pypi djblets(PyPI) | = 0.6.18 | No fix listed |
| pypi djblets(PyPI) | = 0.6.19 | No fix listed |
| pypi djblets(PyPI) | = 0.6.2 | No fix listed |
Show 113 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi djblets(PyPI) | = 0.6.20 | No fix listed |
| pypi djblets(PyPI) | = 0.6.21 | No fix listed |
| pypi djblets(PyPI) | = 0.6.22 | No fix listed |
| pypi djblets(PyPI) | = 0.6.23 | No fix listed |
| pypi djblets(PyPI) | = 0.6.24 | No fix listed |
| pypi djblets(PyPI) | = 0.6.25 | No fix listed |
| pypi djblets(PyPI) | = 0.6.26 | No fix listed |
| pypi djblets(PyPI) | = 0.6.27 | No fix listed |
| pypi djblets(PyPI) | = 0.6.28 | No fix listed |
| pypi djblets(PyPI) | = 0.6.29 | No fix listed |
| pypi djblets(PyPI) | = 0.6.3 | No fix listed |
| pypi djblets(PyPI) | = 0.6.4 | No fix listed |
| pypi djblets(PyPI) | = 0.6.5 | No fix listed |
| pypi djblets(PyPI) | = 0.6.6 | No fix listed |
| pypi djblets(PyPI) | = 0.6.7 | No fix listed |
| pypi djblets(PyPI) | = 0.6.8 | No fix listed |
| pypi djblets(PyPI) | = 0.6.9 | No fix listed |
| pypi djblets(PyPI) | >= 0.7.0, < 0.7.19 | 0.7.19 |
| pypi djblets(PyPI) | = 0.7 | No fix listed |
| pypi djblets(PyPI) | = 0.7.1 | No fix listed |
| pypi djblets(PyPI) | = 0.7.10 | No fix listed |
| pypi djblets(PyPI) | = 0.7.11 | No fix listed |
| pypi djblets(PyPI) | = 0.7.12 | No fix listed |
| pypi djblets(PyPI) | = 0.7.13 | No fix listed |
| pypi djblets(PyPI) | = 0.7.14 | No fix listed |
| pypi djblets(PyPI) | = 0.7.15 | No fix listed |
| pypi djblets(PyPI) | = 0.7.16 | No fix listed |
| pypi djblets(PyPI) | = 0.7.17 | No fix listed |
| pypi djblets(PyPI) | = 0.7.18 | No fix listed |
| pypi djblets(PyPI) | = 0.7.2 | No fix listed |
| pypi djblets(PyPI) | = 0.7.3 | No fix listed |
| pypi djblets(PyPI) | = 0.7.4 | No fix listed |
| pypi djblets(PyPI) | = 0.7.5 | No fix listed |
| pypi djblets(PyPI) | = 0.7.6 | No fix listed |
| pypi djblets(PyPI) | = 0.7.7 | No fix listed |
| pypi djblets(PyPI) | = 0.7.8 | No fix listed |
| pypi djblets(PyPI) | = 0.7.9 | No fix listed |
| pypi reviewboard(PyPI) | < 1.7.15 | 1.7.15 |
| pypi reviewboard(PyPI) | = 1.0 | No fix listed |
| pypi reviewboard(PyPI) | = 1.0.1 | No fix listed |
| pypi reviewboard(PyPI) | = 1.0.2 | No fix listed |
| pypi reviewboard(PyPI) | = 1.0.3 | No fix listed |
| pypi reviewboard(PyPI) | = 1.0.4 | No fix listed |
| pypi reviewboard(PyPI) | = 1.0.5 | No fix listed |
| pypi reviewboard(PyPI) | = 1.0.5.1 | No fix listed |
| pypi reviewboard(PyPI) | = 1.0.6 | No fix listed |
| pypi reviewboard(PyPI) | = 1.0.8 | No fix listed |
| pypi reviewboard(PyPI) | = 1.0.9 | No fix listed |
| pypi reviewboard(PyPI) | = 1.0.dev | No fix listed |
| pypi reviewboard(PyPI) | = 1.5 | No fix listed |
| pypi reviewboard(PyPI) | = 1.5.1 | No fix listed |
| pypi reviewboard(PyPI) | = 1.5.2 | No fix listed |
| pypi reviewboard(PyPI) | = 1.5.3 | No fix listed |
| pypi reviewboard(PyPI) | = 1.5.3.1 | No fix listed |
| pypi reviewboard(PyPI) | = 1.5.4 | No fix listed |
| pypi reviewboard(PyPI) | = 1.5.5 | No fix listed |
| pypi reviewboard(PyPI) | = 1.5.6 | No fix listed |
| pypi reviewboard(PyPI) | = 1.5.7 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.1 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.10 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.11 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.12 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.13 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.14 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.15 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.16 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.17 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.18 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.19 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.2 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.20 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.21 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.22 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.3 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.4 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.4.1 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.5 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.6 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.7 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.7.1 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.8 | No fix listed |
| pypi reviewboard(PyPI) | = 1.6.9 | No fix listed |
| pypi reviewboard(PyPI) | = 1.7 | No fix listed |
| pypi reviewboard(PyPI) | = 1.7.0.1 | No fix listed |
| pypi reviewboard(PyPI) | = 1.7.1 | No fix listed |
| pypi reviewboard(PyPI) | = 1.7.10 | No fix listed |
| pypi reviewboard(PyPI) | = 1.7.11 | No fix listed |
| pypi reviewboard(PyPI) | = 1.7.12 | No fix listed |
| pypi reviewboard(PyPI) | = 1.7.13 | No fix listed |
| pypi reviewboard(PyPI) | = 1.7.14 | No fix listed |
| pypi reviewboard(PyPI) | = 1.7.2 | No fix listed |
| pypi reviewboard(PyPI) | = 1.7.3 | No fix listed |
| pypi reviewboard(PyPI) | = 1.7.4 | No fix listed |
| pypi reviewboard(PyPI) | = 1.7.5 | No fix listed |
| pypi reviewboard(PyPI) | = 1.7.6 | No fix listed |
| pypi reviewboard(PyPI) | = 1.7.7 | No fix listed |
| pypi reviewboard(PyPI) | = 1.7.7.1 | No fix listed |
| pypi reviewboard(PyPI) | = 1.7.8 | No fix listed |
| pypi reviewboard(PyPI) | = 1.7.9 | No fix listed |
| pypi djblets(PyPI) | < 0.7.21 | 0.7.21 |
| pypi djblets(PyPI) | = 0.6.30 | No fix listed |
| pypi djblets(PyPI) | = 0.6.31 | No fix listed |
| pypi djblets(PyPI) | = 0.7.19 | No fix listed |
| pypi djblets(PyPI) | = 0.7.20 | No fix listed |
| reviewboard djblets | = 0.7.21 | No fix listed |
| reviewboard review board | < 1.7.15 | 1.7.15 |
| fedoraproject fedora | = 18 | No fix listed |
| fedoraproject fedora | = 19 | No fix listed |
| fedoraproject fedora | = 20 | No fix listed |
| redhat enterprise linux | = 6.0 | No fix listed |
| Python Software Foundation; Beanbag Djblets | = 0.7.21 | No fix listed |
| Python Software Foundation; Beanbag Review Board | = before 1.7.15 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- access.redhat.com broken-link
- bugzilla.redhat.com issue-tracking third-party-advisory
- exchange.xforce.ibmcloud.com third-party-advisory vdb-entry
- github.com product
- github.com
- github.com
- security-tracker.debian.org third-party-advisory
- web.archive.org
- www.reviewboard.org
- lists.fedoraproject.org mailing-list third-party-advisory
- lists.fedoraproject.org mailing-list third-party-advisory
- lists.fedoraproject.org mailing-list third-party-advisory
- lists.fedoraproject.org mailing-list third-party-advisory
- lists.fedoraproject.org mailing-list third-party-advisory
- www.securityfocus.com third-party-advisory vdb-entry
- pypi.org product
- github.com vendor-advisory