AE
Product
App Engine Python Sdk
4
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add App Engine Python Sdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2011-4213 | – | Oct 30 | The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent use of the os module, which allows local users to bypass intended access… Affected: before 1.5.4 |
| CVE-2011-4212 | – | Oct 30 | The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent os.popen calls, which allows local users to bypass intended access restrictions… Affected: through 1.5.3; 1.0.1; 1.0.2; 1.1.0; 1.1.1; 1.1.2; +31 more |
| CVE-2011-4211 | – | Oct 30 | The FakeFile implementation in the sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly control the opening of files, which allows local users to… Affected: through 1.5.3; 1.0.1; 1.0.2; 1.1.0; 1.1.1; 1.1.2; +31 more |
| CVE-2011-1364 | – | Oct 30 | Cross-site request forgery (CSRF) vulnerability in _ah/admin/interactive/execute (aka the Interactive Console) in the SDK Console (aka Admin Console) in the Google App Engine… Affected: through 1.5.3; 1.0.1; 1.0.2; 1.1.0; 1.1.1; 1.1.2; +31 more |
Showing 4
