Lucene search

Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain

🗓️ 06 May 2024 14:27:21Reported by GoogleType

osv🔗 osv.dev👁 118 Views

Werkzeug debugger allows remote code executio

Reporter	Title	Published	Views	Family All 79
Cvelist	CVE-2024-34069 Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution	6 May 202414:44	–	cvelist
Tenable Nessus	Fedora 40 : mingw-python-werkzeug (2024-8e8ff9d6ec)	16 May 202400:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: python-werkzeug (CVE-2024-34069)	3 Jul 202400:00	–	nessus
Tenable Nessus	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS : Werkzeug vulnerability (USN-6799-1)	29 May 202400:00	–	nessus
Tenable Nessus	SUSE SLES15 / openSUSE 15 Security Update : python-Werkzeug (SUSE-SU-2024:1608-1)	11 May 202400:00	–	nessus
Tenable Nessus	SUSE SLES12 Security Update : python-Werkzeug (SUSE-SU-2024:1572-1)	10 May 202400:00	–	nessus
Tenable Nessus	Fedora 38 : mingw-python-werkzeug (2024-48123e7aae)	19 May 202400:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-Werkzeug (SUSE-SU-2024:1591-1)	11 May 202400:00	–	nessus
Tenable Nessus	RHEL 9 : OpenShift Container Platform 4.15.30 (RHSA-2024:6016)	5 Sep 202400:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : python-Werkzeug (SUSE-SU-2024:1591-2)	19 Jun 202400:00	–	nessus

Source	Link
github	www.github.com/pallets/werkzeug/security/advisories/GHSA-2g68-c3qc-8985
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-34069
github	www.github.com/pallets/werkzeug/commit/3386395b24c7371db11a5b8eaac0c91da5362692
github	www.github.com/pallets/werkzeug
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/H4SH32AM3CTPMAAEOIDAN7VU565LO4IR
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/HFERFN7PINV4MOGMGA3DPIXJPDCYOEJZ
security	www.security.netapp.com/advisory/ntap-20240614-0004

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 May 2024 14:21Current

7.4High risk

Vulners AI Score7.4

CVSS37.5

EPSS0.0004

SSVC