CVE-2013-5093

6.8

MEDIUMCVSS v2

Published

September 27, 2013

Affected

4 projects

Assigned by

MITRE

Severity scale

010

Description

The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object.

graphite

NPMA node.js client for graphite.

= 0.9.8, = 0.9.5, = 0.9.10, = 0.9.7, = 0.9.6, = 0.9.9NVD

rapid7/metasploit-framework

GitHubMetasploit Framework

NVD

graphite-project/graphite-web

GitHub

More on this CVE

NVD↗GitHub Advisory↗

A highly scalable real-time graphing system

>= 0.9.5, < 0.9.11NVD

silnrsi/graphite

GitHubGraphite is a "smart font" system developed specifically to handle the complexities of lesser-known languages of the world.

= 0.9.8, = 0.9.5, = 0.9.10, = 0.9.7, = 0.9.6, = 0.9.9NVD

Security Advisories

CVE-2013-5093

Description

More on this CVE