Supervisor/supervisor

Supervisor/supervisor

supervisord.org

Releases48

Frequency4 months 3 weeks

Last Release 9 months ago

Stars9.05K

Supervisor process control system for Unix (supervisord)

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2019-12105 ↗	Sep 10, 2019Tuesday, 10 September 2019, 17:15	8.2 HIGH	6.4 MEDIUM
In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected component, inet_http_server, is not enabled by default but if the user enables it and does not set a password, Supervisor logs a warning message. The maintainer indicated the ability to run an open server will not be removed but an additional warning was added to the documentation
CVE-2017-11610 ↗	Aug 23, 2017Wednesday, 23 August 2017, 14:29	—	9 HIGH
The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups.