AE
Product
App Engine Python Sdk
by Google · last CVE Oct 30, 2011
4
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch

Add App Engine Python Sdk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2011-4213
–
0%
Oct 30
The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent use of the os module, which allows local users to bypass intended access…
Affected: before 1.5.4
CVE-2011-4212
–
0%
Oct 30
The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent os.popen calls, which allows local users to bypass intended access restrictions…
Affected: through 1.5.3; 1.0.1; 1.0.2; 1.1.0; 1.1.1; 1.1.2; +31 more
CVE-2011-4211
–
0%
Oct 30
The FakeFile implementation in the sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly control the opening of files, which allows local users to…
Affected: through 1.5.3; 1.0.1; 1.0.2; 1.1.0; 1.1.1; 1.1.2; +31 more
CVE-2011-1364
–
0%
Oct 30
Cross-site request forgery (CSRF) vulnerability in _ah/admin/interactive/execute (aka the Interactive Console) in the SDK Console (aka Admin Console) in the Google App Engine…
Affected: through 1.5.3; 1.0.1; 1.0.2; 1.1.0; 1.1.1; 1.1.2; +31 more
Showing 4