Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:PYSEC-2023-177
HistorySep 25, 2023 - 12:15 p.m.

PYSEC-2023-177

2023-09-2512:15:00
Google
osv.dev
23
pysec-2023-177
gevent
wsgiserver
privilege escalation
software

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

55.1%

JSON

An issue in Gevent Gevent before version 23.9.1 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.

Related

veracode 1
ibm 5
nvd 1
cbl_mariner 1
osv 2
openvas 1
prion 1
github 1
cve 1
cgr 1
nessus 4
cvelist 1
redhatcve 1
ubuntucve 1
redhat 1
wolfi 1
veracode
veracode
HTTP Request/Response Smuggling
2023-09-27 10:19:40
ibm
ibm
Security Bulletin: Gevent, used in IBM Maximo Application Suite - Monitor Component, is vulnerable to CVE-2023-41419 which allows remote attackers to escalate privileges.
2023-12-12 17:24:15
Security Bulletin: IBM Maximo Application Suite uses gevent-21.1.2-cp37-cp37m-manylinux2010_x86_64.whl which is vulnerable to CVE-2023-41419
2023-12-14 14:18:32
Security Bulletin: Vulnerability in CloudPak for Watson AIOps. [CVE-2023-41419]
2023-10-25 20:26:21
nvd
nvd
CVE-2023-41419
2023-09-25 12:15:11
cbl_mariner
cbl_mariner
CVE-2023-41419 affecting package python-gevent for versions less than 1.3.6-9
2023-11-08 02:07:28
osv
osv
Gevent allows remote attacker to escalate privileges
2023-09-25 12:30:44
CVE-2023-41419
2023-09-25 12:15:11
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:4091-1)
2023-10-18 00:00:00
prion
prion
Design/Logic Flaw
2023-09-25 12:15:00
github
github
Gevent allows remote attacker to escalate privileges
2023-09-25 12:30:44
cve
cve
CVE-2023-41419
2023-09-25 12:15:11
cgr
cgr
CVE-2023-41419 vulnerabilities
2024-05-19 03:07:16
nessus
nessus
SUSE SLED15 / SLES15 Security Update : python-gevent (SUSE-SU-2023:4091-1)
2023-10-18 00:00:00
RHEL 7 : python-gevent (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 9 : Red Hat OpenStack Platform 17.1.1 (python-gevent) (RHSA-2023:7438)
2024-04-28 00:00:00
cvelist
cvelist
CVE-2023-41419
2023-09-25 00:00:00
redhatcve
redhatcve
CVE-2023-41419
2023-09-25 18:55:01
ubuntucve
ubuntucve
CVE-2023-41419
2023-09-25 00:00:00
redhat
redhat
(RHSA-2023:7438) Important: Red Hat OpenStack Platform 17.1.1 (python-gevent) security update
2023-11-21 15:40:36
wolfi
wolfi
CVE-2023-41419 vulnerabilities
2024-06-16 09:08:15

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

55.1%

JSON
Related for OSV:PYSEC-2023-177
veracode1ibm5nvd1cbl_mariner1osv2openvas1prion1github1cve1cgr1nessus4cvelist1redhatcve1ubuntucve1redhat1wolfi1