Lucene search
GoogleOSV:USN-6799-1HistoryMay 29, 2024 - 3:38 p.m.
python-werkzeug vulnerability
2024-05-2915:38:21
Google
osv.dev
23
werkzeug
debugger
remote attacker
code execution
software
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.2
Confidence
Low
EPSS
0
Percentile
15.5%
It was discovered that the debugger in Werkzeug was not restricted to
trusted hosts. A remote attacker could possibly use this issue to execute
code on the host under certain circumstances.
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:1608-1)
2024-05-13 00:00:00
Mageia: Security Advisory (MGASA-2024-0234)
2024-06-25 00:00:00
Ubuntu: Security Advisory (USN-6799-1)
2024-05-30 00:00:00
ibm
ibm
fedora
fedora
[SECURITY] Fedora 38 Update: mingw-python-werkzeug-2.2.3-2.fc38
2024-05-19 01:17:04
[SECURITY] Fedora 40 Update: mingw-python-werkzeug-3.0.3-1.fc40
2024-05-16 01:52:36
cvelist
cvelist
osv
osv
CGA-mmv2-q2vv-5j43
2024-06-06 12:28:32
Security update for python-Werkzeug
2024-06-18 11:06:29
Security update for python-Werkzeug
2024-06-18 20:04:01
nessus
nessus
Fedora 40 : mingw-python-werkzeug (2024-8e8ff9d6ec)
2024-05-16 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : python-Werkzeug (SUSE-SU-2024:1608-1)
2024-05-11 00:00:00
CBL Mariner 2.0 Security Update: python-werkzeug (CVE-2024-34069)
2024-07-03 00:00:00
cgr
cgr
CVE-2024-34069 vulnerabilities
2024-05-19 03:07:16
cbl_mariner
cbl_mariner
veracode
veracode
Remote Code Execution (RCE)
2024-05-07 08:15:37
redhat
redhat
nvd
nvd
CVE-2024-34069
2024-05-06 15:15:23
debiancve
debiancve
CVE-2024-34069
2024-05-06 15:15:23
ubuntucve
ubuntucve
CVE-2024-34069
2024-05-06 00:00:00
mageia
mageia
Updated python-werkzeug packages fix security vulnerability
2024-06-24 22:04:12
wolfi
wolfi
CVE-2024-34069 vulnerabilities
2024-09-27 09:13:12
cve
cve
CVE-2024-34069
2024-05-06 15:15:23
vulnrichment
vulnrichment
ubuntu
ubuntu
Werkzeug vulnerability
2024-05-29 00:00:00
github
github
redhatcve
redhatcve
CVE-2024-34069
2024-05-07 05:54:55
redos
redos
ROS-20240703-09
2024-07-03 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.2
Confidence
Low
EPSS
0
Percentile
15.5%
Related for OSV:USN-6799-1