Deserialization of Untrusted Data in Beaker
The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2013-7489US | medium6.8 | — | ||
The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution. | ||||
02
references
External citations — patches, advisories, analysis.
- https://bugzilla.redhat.com/show_bug.cgi?id=1850105WEB
- https://github.com/advisories/GHSA-3cwm-7jmm-774wADVISORY
- https://github.com/bbangert/beakerPACKAGE
- https://github.com/bbangert/beaker/issues/191WEB
- https://github.com/pypa/advisory-database/tree/main/vulns/beaker/PYSEC-2020-216.yamlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2013-7489ADVISORY
- https://www.openwall.com/lists/oss-security/2020/05/14/11WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan