Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

google app engine python sdk 1.4.2 vulnerabilities and exploits

(subscribe to this query)
7.2
CVSSv2
CVE-2011-4211
The FakeFile implementation in the sandbox environment in the Google App Engine Python SDK prior to 1.5.4 does not properly control the opening of files, which allows local users to bypass intended access restrictions and create arbitrary files via ALLOWED_MODES and ALLOWED_DIRS ...
Google App Engine Python Sdk 1.0.1Google App Engine Python Sdk 1.0.2Google App Engine Python Sdk 1.1.6Google App Engine Python Sdk 1.1.7Google App Engine Python Sdk 1.2.4Google App Engine Python Sdk 1.2.5Google App Engine Python Sdk 1.3.5Google App Engine Python Sdk 1.3.6Google App Engine Python Sdk 1.5.0Google App Engine Python Sdk 1.5.1Google App Engine Python SdkGoogle App Engine Python Sdk 1.1.4Google App Engine Python Sdk 1.1.5Google App Engine Python Sdk 1.2.1Google App Engine Python Sdk 1.2.2Google App Engine Python Sdk 1.3.3Google App Engine Python Sdk 1.3.4Google App Engine Python Sdk 1.4.2Google App Engine Python Sdk 1.4.3Google App Engine Python Sdk 1.1.0Google App Engine Python Sdk 1.1.1Google App Engine Python Sdk 1.1.8
7.2
CVSSv2
CVE-2011-4212
The sandbox environment in the Google App Engine Python SDK prior to 1.5.4 does not properly prevent os.popen calls, which allows local users to bypass intended access restrictions and execute arbitrary commands via a dev_appserver.RestrictedPathFunction._original_os reference wi...
Google App Engine Python Sdk 1.1.1Google App Engine Python Sdk 1.1.2Google App Engine Python Sdk 1.2.0Google App Engine Python Sdk 1.2.3Google App Engine Python Sdk 1.3.0Google App Engine Python Sdk 1.3.1Google App Engine Python Sdk 1.3.8Google App Engine Python Sdk 1.4.0Google App Engine Python Sdk 1.0.2Google App Engine Python Sdk 1.1.0Google App Engine Python Sdk 1.1.8Google App Engine Python Sdk 1.1.9Google App Engine Python Sdk 1.2.6Google App Engine Python Sdk 1.2.7Google App Engine Python Sdk 1.3.6Google App Engine Python Sdk 1.3.7Google App Engine Python Sdk 1.5.2Google App Engine Python Sdk 1.1.3Google App Engine Python Sdk 1.1.4Google App Engine Python Sdk 1.1.5Google App Engine Python Sdk 1.2.1Google App Engine Python Sdk 1.2.2
6.8
CVSSv2
CVE-2011-1364
Cross-site request forgery (CSRF) vulnerability in _ah/admin/interactive/execute (aka the Interactive Console) in the SDK Console (aka Admin Console) in the Google App Engine Python SDK prior to 1.5.4 allows remote malicious users to hijack the authentication of administrators fo...
Google App Engine Python SdkGoogle App Engine Python Sdk 1.1.4Google App Engine Python Sdk 1.1.5Google App Engine Python Sdk 1.2.2Google App Engine Python Sdk 1.1.2Google App Engine Python Sdk 1.1.3Google App Engine Python Sdk 1.2.0Google App Engine Python Sdk 1.2.3Google App Engine Python Sdk 1.2.1Google App Engine Python Sdk 1.3.1Google App Engine Python Sdk 1.3.2Google App Engine Python Sdk 1.4.0Google App Engine Python Sdk 1.4.1Google App Engine Python Sdk 1.1.0Google App Engine Python Sdk 1.1.1Google App Engine Python Sdk 1.1.8Google App Engine Python Sdk 1.1.9Google App Engine Python Sdk 1.2.7Google App Engine Python Sdk 1.3.0Google App Engine Python Sdk 1.3.7Google App Engine Python Sdk 1.3.8Google App Engine Python Sdk 1.5.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook