Description
An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Python Software Foundation; Beanbag Djblets
0.7.21affected
Python Software Foundation; Beanbag Review Board
before 1.7.15affected
References
- https://security-tracker.debian.org/tracker/CVE-2013-4409 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4409 ↗
- https://access.redhat.com/security/cve/cve-2013-4409 ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119820.html ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120619.html ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119819.html ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119830.html ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119831.html ↗
- http://www.securityfocus.com/bid/63029 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88059 ↗