CVE-2013-4409

moderate-risk

Published 2019-11-04

An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests.

Do I need to act?

1.2% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Djblets

Review Board

Fedora

Enterprise Linux

Redhat Fedoraproject Reviewboard

Mailing List http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120619.h...

Mailing List http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119819.ht...

Mailing List http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119820.ht...

Mailing List http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119830.ht...

Mailing List http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119831.ht...

Third Party Advisory http://www.securityfocus.com/bid/63029

Broken Link https://access.redhat.com/security/cve/cve-2013-4409

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4409

Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/88059

Third Party Advisory https://security-tracker.debian.org/tracker/CVE-2013-4409