PYSEC-2023-177
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2023-41419
- Alias
- GHSA-x7m3-jprg-wc5g
Description
An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.
Paquets affectés
| Paquet | Versions |
|---|---|
| PyPI · gevent | introduced 0, fixed 2f53c851eaf926767fbac62385615efd4886221c ; introduced 0, fixed 23.9.0 |
Références
- https://github.com/gevent/gevent/issues/1989 REPORT
- https://github.com/gevent/gevent/commit/2f53c851eaf926767fbac62385615efd4886221c FIX
- https://github.com/advisories/GHSA-x7m3-jprg-wc5g ADVISORY
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — PyPA Advisory Database |