2 matches found
CVE-2011-4211
The FakeFile implementation in the sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly control the opening of files, which allows local users to bypass intended access restrictions and create arbitrary files via ALLOWEDMODES and ALLOWEDDIRS changes within the co...
7.2CVSS6.3AI score0.0022EPSS
SaveExploits1References4
Design/Logic Flaw
The FakeFile implementation in the sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly control the opening of files, which allows local users to bypass intended access restrictions and create arbitrary files via ALLOWEDMODES and ALLOWEDDIRS changes within the co...
7.2CVSS6.7AI score0.00495EPSS
SaveExploits2References4Affected Software1
20