Lucene search

graphite-web is vulnerable to Remote Code Execution via renderLocalView function

🗓️ 17 May 2022 05:05:03Reported by GitHub Advisory DatabaseType

graphite-web Remote Code Execution vulnerabilit

Reporter	Title	Published	Views	Family All 35
Packet Storm	Graphite Web Unsafe Pickle Handling	21 Aug 201300:00	–	packetstorm
UbuntuCve	CVE-2013-5093	27 Sep 201300:00	–	ubuntucve
NVD	CVE-2013-5093	27 Sep 201310:08	–	nvd
NVD	CVE-2013-5942	27 Sep 201310:08	–	nvd
NVD	CVE-2013-5903	23 Sep 201319:55	–	nvd
Tenable Nessus	Fedora 18 : graphite-web-0.9.12-1.fc18 (2013-15713)	19 Sep 201300:00	–	nessus
Tenable Nessus	Fedora 19 : graphite-web-0.9.12-1.fc19 (2013-15710)	19 Sep 201300:00	–	nessus
Tenable Nessus	FreeBSD : py-graphite-web -- Multiple vulnerabilities (e1f99d59-81aa-4662-bf62-c1076f5016c8)	1 Oct 201300:00	–	nessus
Metasploit	Graphite Web Unsafe Pickle Handling	20 Aug 201316:56	–	metasploit
Prion	Authentication flaw	27 Sep 201310:08	–	prion

Vulners

Node

graphite\-webRange0.9.5–0.9.10

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-5093
github	www.github.com/graphite-project/graphite-web/blob/master/docs/releases/0_9_11.rst
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/graphite_pickle_exec.rb
exploit-db	www.exploit-db.com/exploits/27752
github	www.github.com/graphite-project/graphite-web/blob/d39d455622127e479d8c4e7760311e3883cfd086/docs/releases/0_9_11.rst
github	www.github.com/pypa/advisory-database/tree/main/vulns/graphite-web/PYSEC-2013-3.yaml
web	www.web.archive.org/web/20200228174538/http://www.securityfocus.com/bid/61894
ceriksen	www.ceriksen.com/2013/08/20/graphite-remote-code-execution-vulnerability-advisory
github	www.github.com/advisories/GHSA-m923-w2gj-v43g

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 May 2022 05:03Current

7.4High risk

Vulners AI Score7.4

CVSS26.8

EPSS0.8408

CWE-94