Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cbl_marinerCBL MarinerCBLMARINER:40466
HistoryMay 17, 2024 - 5:57 a.m.

CVE-2024-34069 affecting package python-werkzeug for versions less than 2.3.7-2

2024-05-1705:57:11
CBL Mariner
14
cve-2024-34069
python-werkzeug
vulnerability
patch
available
unix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0

Percentile

15.5%

JSON

CVE-2024-34069 affecting package python-werkzeug for versions less than 2.3.7-2. A patched version of the package is available.

OSVersionArchitecturePackageVersionFilename
CBL-Mariner2.0allpython-werkzeug< 2.3.7-2UNKNOWN

Related

openvas 10
ibm 8
fedora 2
cvelist 1
osv 11
nessus 13
cgr 1
cbl_mariner 1
veracode 1
redhat 4
nvd 1
debiancve 1
ubuntucve 1
mageia 1
cve 1
wolfi 1
vulnrichment 1
ubuntu 1
github 1
redhatcve 1
redos 1
oracle 1
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:1608-1)
2024-05-13 00:00:00
Mageia: Security Advisory (MGASA-2024-0234)
2024-06-25 00:00:00
Ubuntu: Security Advisory (USN-6799-1)
2024-05-30 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in werkzeug
2024-08-29 18:58:10
Security Bulletin: Vulnerability in Pallets Werkzeug affects IBM Process Mining CVE-2024-34069
2024-06-28 15:16:43
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to an arbitrary code execution, in Pallets Werkzeug [CVE-2024-34069]
2024-08-01 16:19:42
fedora
fedora
[SECURITY] Fedora 38 Update: mingw-python-werkzeug-2.2.3-2.fc38
2024-05-19 01:17:04
[SECURITY] Fedora 40 Update: mingw-python-werkzeug-3.0.3-1.fc40
2024-05-16 01:52:36
cvelist
cvelist
CVE-2024-34069 Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution
2024-05-06 14:44:38
osv
osv
CGA-mmv2-q2vv-5j43
2024-06-06 12:28:32
Security update for python-Werkzeug
2024-06-18 11:06:29
Security update for python-Werkzeug
2024-06-18 20:04:01
nessus
nessus
Fedora 40 : mingw-python-werkzeug (2024-8e8ff9d6ec)
2024-05-16 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : python-Werkzeug (SUSE-SU-2024:1608-1)
2024-05-11 00:00:00
CBL Mariner 2.0 Security Update: python-werkzeug (CVE-2024-34069)
2024-07-03 00:00:00
cgr
cgr
CVE-2024-34069 vulnerabilities
2024-05-19 03:07:16
cbl_mariner
cbl_mariner
CVE-2024-34069 affecting package python-werkzeug for versions less than 3.0.3-1
2024-06-21 09:32:44
veracode
veracode
Remote Code Execution (RCE)
2024-05-07 08:15:37
redhat
redhat
(RHSA-2024:6016) Important: OpenShift Container Platform 4.15.30 packages and security update
2024-09-05 06:05:53
(RHSA-2024:5810) Important: OpenShift Container Platform 4.12.64 security update
2024-08-29 03:09:23
(RHSA-2024:5107) Important: OpenShift Container Platform 4.16.7 bug fix and security update
2024-08-13 09:52:51
nvd
nvd
CVE-2024-34069
2024-05-06 15:15:23
debiancve
debiancve
CVE-2024-34069
2024-05-06 15:15:23
ubuntucve
ubuntucve
CVE-2024-34069
2024-05-06 00:00:00
mageia
mageia
Updated python-werkzeug packages fix security vulnerability
2024-06-24 22:04:12
cve
cve
CVE-2024-34069
2024-05-06 15:15:23
wolfi
wolfi
CVE-2024-34069 vulnerabilities
2024-09-30 03:53:08
vulnrichment
vulnrichment
CVE-2024-34069 Werkzeug's improper usage of a pathname and improper CSRF protection results in the remote command execution
2024-05-06 14:44:38
ubuntu
ubuntu
Werkzeug vulnerability
2024-05-29 00:00:00
github
github
Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain
2024-05-06 14:21:27
redhatcve
redhatcve
CVE-2024-34069
2024-05-07 05:54:55
redos
redos
ROS-20240703-09
2024-07-03 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0

Percentile

15.5%

JSON
Related for CBLMARINER:40466
openvas10ibm8fedora2cvelist1osv11nessus13cgr1cbl_mariner1veracode1redhat4nvd1debiancve1ubuntucve1mageia1cve1wolfi1vulnrichment1ubuntu1github1redhatcve1redos1oracle1