Lucene search
GoogleOSV:GHSA-CH3J-W953-HFCMHistoryMay 17, 2022 - 5:03 a.m.
graphite-web is vulnerable to Remote Code Execution
2022-05-1705:03:05
Google
osv.dev
5
0.969 High
EPSS
Percentile
99.7%
Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to (1) remote_storage.py, (2) storage.py, (3) render/datalib.py, and (4) whitelist/views.py, a different vulnerability than CVE-2013-5093.
| CPE | Name | Operator | Version |
|---|---|---|---|
| graphite-web | eq | 0.9.10 | |
| graphite-web | eq | 0.9.9 | |
| graphite-web | eq | 0.9.6 | |
| graphite-web | eq | 0.9.8 | |
| graphite-web | eq | 0.9.5 | |
| graphite-web | eq | 0.9.7c | |
| graphite-web | eq | 0.9.7 | |
| graphite-web | eq | 0.9.7b |
Related
ubuntucve
ubuntucve
CVE-2013-5942
2013-09-27 00:00:00
CVE-2013-5093
2013-09-27 00:00:00
debiancve
debiancve
CVE-2013-5942
2022-10-03 16:14:55
CVE-2013-5093
2022-10-03 16:14:53
github
github
graphite-web is vulnerable to Remote Code Execution
2022-05-17 05:03:05
graphite-web is vulnerable to Remote Code Execution via renderLocalView function
2022-05-17 05:03:05
osv
osv
PYSEC-2013-34
2013-09-27 10:08:00
PYSEC-2013-3
2013-09-27 10:08:00
graphite-web is vulnerable to Remote Code Execution via renderLocalView function
2022-05-17 05:03:05
cvelist
cvelist
CVE-2013-5942
2022-10-03 16:14:55
CVE-2013-5093
2022-10-03 16:14:53
cve
cve
prion
prion
Design/Logic Flaw
2013-09-27 10:08:00
Design/Logic Flaw
2013-09-23 19:55:00
Authentication flaw
2013-09-27 10:08:00
nvd
nvd
openvas
openvas
Fedora Update for graphite-web FEDORA-2013-15713
2013-09-24 00:00:00
Fedora Update for graphite-web FEDORA-2013-15713
2013-09-24 00:00:00
Fedora Update for graphite-web FEDORA-2013-15710
2013-09-24 00:00:00
checkpoint_advisories
checkpoint_advisories
Graphite Web Unsafe Module Handling Code Execution (CVE-2013-5093)
2013-10-27 00:00:00
packetstorm
packetstorm
Graphite Web Unsafe Pickle Handling
2013-08-21 00:00:00
nessus
nessus
Fedora 18 : graphite-web-0.9.12-1.fc18 (2013-15713)
2013-09-19 00:00:00
Fedora 19 : graphite-web-0.9.12-1.fc19 (2013-15710)
2013-09-19 00:00:00
zdt
zdt
Graphite Web Unsafe Pickle Handling Exploit
2013-08-21 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: graphite-web-0.9.12-1.fc18
2013-09-18 13:01:50
[SECURITY] Fedora 19 Update: graphite-web-0.9.12-1.fc19
2013-09-18 13:00:38
freebsd
freebsd
py-graphite-web -- Multiple vulnerabilities
2013-08-21 00:00:00