TU
Product
Turbogears2
2
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Turbogears2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-5015 | – | Nov 6 | The URL dispatch mechanism in TurboGears2 (aka tg2) before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack… Affected: through 2.1b2; 1.9.7a2; 1.9.7a3; 1.9.7a4; 1.9.7b1; 1.9.7b2; +13 more |
| CVE-2009-5014 | – | Nov 6 | The default quickstart configuration of TurboGears2 (aka tg2) before 2.0.2 has a weak cookie salt, which makes it easier for remote attackers to bypass repoze.who authentication… Affected: through 2.1b2; 1.9.7a2; 1.9.7a3; 1.9.7a4; 1.9.7b1; 1.9.7b2; +13 more |
Showing 2