Lucene search

[email protected]NVD:CVE-2013-4409

HistoryNov 04, 2019 - 9:15 p.m.

CVE-2013-4409

2019-11-0421:15:11

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.016

Percentile

87.6%

JSON

An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests.

Affected configurations

Nvd

Node

reviewboarddjbletsMatch0.7.21

reviewboardreview_boardRange<1.7.15

Node

fedoraprojectfedoraMatch18

fedoraprojectfedoraMatch19

fedoraprojectfedoraMatch20

Node

redhatenterprise_linuxMatch6.0

VendorProductVersionCPE
reviewboarddjblets0.7.21cpe:2.3:a:reviewboard:djblets:0.7.21:*:*:*:*:*:*:*
reviewboardreview_board*cpe:2.3:a:reviewboard:review_board:*:*:*:*:*:*:*:*
fedoraprojectfedora18cpe:2.3:o:fedoraproject:fedora:18:*:*:*:*:*:*:*
fedoraprojectfedora19cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*
fedoraprojectfedora20cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
redhatenterprise_linux6.0cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
reviewboard	djblets	0.7.21	cpe:2.3:a:reviewboard:djblets:0.7.21:::::::*
reviewboard	review_board	*	cpe:2.3:a:reviewboard:review_board::::::::
fedoraproject	fedora	18	cpe:2.3:o:fedoraproject:fedora:18:::::::*
fedoraproject	fedora	19	cpe:2.3:o:fedoraproject:fedora:19:::::::*
fedoraproject	fedora	20	cpe:2.3:o:fedoraproject:fedora:20:::::::*
redhat	enterprise_linux	6.0	cpe:2.3:o:redhat:enterprise_linux:6.0:::::::*