p PatchFirst

PatchFirst · Свежие уязвимости

Python: уязвимости стека · Страница 185

За последние 30 дней в Python опубликовано уязвимостей: 318; в каталоге KEV: 1.

RSS ↗ JSON ↗
Фильтры уязвимостей
Python

Уязвимостей: 7143

  1. CVE-2024-47084

    Средний · CVSS 6.9EPSS 0,53%Есть исправление

    CORS origin validation is not performed when the request has a cookie in Gradio

    Gradio is an open-source Python package designed for quick prototyping. This vulnerability is related to **CORS origin validation**, where the Gradio server fails to validate the request origin when a cookie is present. This allows an attacker’s website to make unauthorized requests to a local Gradio server. Potentially, attackers can upload files, steal authentication tokens, and access user data if the victim visits a malicious website while logged into Gradio. This impacts users who have deployed Gradio locally and use basic authentication. Users are advised to upgrade to `gradio>4.44` to address this issue. As a workaround, users can manu

    gradio gradioPython
    • Обновитесь до 4.44.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗

  2. CVE-2024-47164

    Низкий · CVSS 2.3EPSS 0,7%Есть исправление

    The `is_in_or_equal` function may be bypassed in Gradio

    Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to the **bypass of directory traversal checks** within the `is_in_or_equal` function. This function, intended to check if a file resides within a given directory, can be bypassed with certain payloads that manipulate file paths using `..` (parent directory) sequences. Attackers could potentially access restricted files if they are able to exploit this flaw, although the difficulty is high. This primarily impacts users relying on Gradio’s blocklist or directory access validation, particularly when handling file uploads. Users are advised to upgra

    gradio gradioPython
    • Обновитесь до 5.0.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗

  3. CVE-2024-47165

    Средний · CVSS 6.9EPSS 0,3%Есть исправление

    CORS origin validation accepts the null origin in Gradio

    Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **CORS origin validation accepting a null origin**. When a Gradio server is deployed locally, the `localhost_aliases` variable includes "null" as a valid origin. This allows attackers to make unauthorized requests from sandboxed iframes or other sources with a null origin, potentially leading to data theft, such as user authentication tokens or uploaded files. This impacts users running Gradio locally, especially those using basic authentication. Users are advised to upgrade to `gradio>=5.0` to address this issue. As a workaround, users can m

    gradio gradioPython
    • Обновитесь до 5.0.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗

  4. CVE-2024-47166

    Низкий · CVSS 2.3EPSS 0,44%Есть исправление

    One-level read path traversal in `/custom_component` in Gradio

    Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **one-level read path traversal** in the `/custom_component` endpoint. Attackers can exploit this flaw to access and leak source code from custom Gradio components by manipulating the file path in the request. Although the traversal is limited to a single directory level, it could expose proprietary or sensitive code that developers intended to keep private. This impacts users who have developed custom Gradio components and are hosting them on publicly accessible servers. Users are advised to upgrade to `gradio>=4.44` to address this issue. A

    gradio gradioPython
    • Обновитесь до 4.44.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗

  5. CVE-2024-47167

    Средний · CVSS 6.9EPSS 0,48%Есть исправление

    SSRF in the path parameter of /queue/join in Gradio

    Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **Server-Side Request Forgery (SSRF)** in the `/queue/join` endpoint. Gradio’s `async_save_url_to_cache` function allows attackers to force the Gradio server to send HTTP requests to user-controlled URLs. This could enable attackers to target internal servers or services within a local network and possibly exfiltrate data or cause unwanted internal requests. Additionally, the content from these URLs is stored locally, making it easier for attackers to upload potentially malicious files to the server. This impacts users deploying Gradio server

    gradio gradioPython
    • Обновитесь до 5.0.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗

  6. CVE-2024-47168

    Низкий · CVSS 2.3EPSS 0,33%Есть исправление

    The `enable_monitoring` flag set to `False` does not disable monitoring in Gradio

    Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves data exposure due to the enable_monitoring flag not properly disabling monitoring when set to False. Even when monitoring is supposedly disabled, an attacker or unauthorized user can still access the monitoring dashboard by directly requesting the /monitoring endpoint. This means that sensitive application analytics may still be exposed, particularly in environments where monitoring is expected to be disabled. Users who set enable_monitoring=False to prevent unauthorized access to monitoring data are impacted. Users are advised to upgrade to gr

    gradio gradioPython
    • Обновитесь до 4.44.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗

  7. CVE-2024-7041

    Средний · CVSS 6.5EPSS 0,37%Есть исправление

    IDOR in open-webui/open-webui

    An Insecure Direct Object Reference (IDOR) vulnerability exists in open-webui/open-webui version v0.3.8. The vulnerability occurs in the API endpoint `http://0.0.0.0:3000/api/v1/memories/{id}/update`, where the decentralization design is flawed, allowing attackers to edit other users' memories without proper authorization.

    open-webui/open-webui open-webuiPython
    • Обновитесь до 0.6.3
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗

  8. CVE-2024-47833

    Средний · CVSS 6.3EPSS 0,25%Есть исправление

    Session Cookie without Secure and HTTPOnly flags in taipy

    Taipy is an open-source Python library for easy, end-to-end application development for data scientists and machine learning engineers. In affected versions session cookies are served without Secure and HTTPOnly flags. This issue has been addressed in release version 4.0.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

    taipy taipyPython
    • Обновитесь до 4.0.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗

  9. CVE-2024-47813

    Низкий · CVSS 2.9EPSS 0,15%Есть исправление

    Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations

    Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a `wasmtime::Engine`'s internal type registry was susceptible to double-unregistration bugs due to a race condition, leading to panics and potentially type registry corruption. That registry corruption could, following an additional and particular sequence of concurrent events, lead to violations of WebAssembly's control-flow integrity (CFI) and type safety. Users that do not use `wasmtime::Engine` across multiple threads are not affected. Users that only create new modules across threads over time are additionally not affected. Reproducing this bug

    wasmtime rust-wasmtime rust-wasmtime wasmtime rust-wasmtime rust-wasmtime rust-wasmtime rust-wasmtimeОперационные системы Python
    • Обновитесь до 21.0.2+dfsg-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  10. CVE-2024-47763

    Средний · CVSS 5.5EPSS 0,24%Есть исправление

    Wasmtime runtime crash when combining tail calls with trapping imports

    Wasmtime is an open source runtime for WebAssembly. Wasmtime's implementation of WebAssembly tail calls combined with stack traces can result in a runtime crash in certain WebAssembly modules. The runtime crash may be undefined behavior if Wasmtime was compiled with Rust 1.80 or prior. The runtime crash is a deterministic process abort when Wasmtime is compiled with Rust 1.81 and later. WebAssembly tail calls are a proposal which relatively recently reached stage 4 in the standardization process. Wasmtime first enabled support for tail calls by default in Wasmtime 21.0.0, although that release contained a bug where it was only on-by-default f

    wasmtime rust-wasmtime rust-wasmtime wasmtime-bin rust-wasmtime rust-wasmtime rust-wasmtimeОперационные системы Python
    • Обновитесь до 21.0.2+dfsg-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  12. CVE-2024-45231

    Средний · CVSS 5.3EPSS 0,79%Есть исправление

    CVE-2024-45231

    An issue was discovered in Django v5.1.1, v5.0.9, and v4.2.16. The django.contrib.auth.forms.PasswordResetForm class, when used in a view implementing password reset flows, allows remote attackers to enumerate user e-mail addresses by sending password reset requests and observing the outcome (only when e-mail sending is consistently failing).

    n/a python-django python-django python-django django django django django python-django python-django python-django python-djangoОперационные системы Python
    • Обновитесь до 1:1.11.11-1ubuntu1.21+esm7
    • Обновитесь до 2:2.2.12-1ubuntu0.25
    • Обновитесь до 2:3.2.12-2ubuntu1.14
    • Обновитесь до 3:3.2.25-0+deb12u1
    • Обновитесь до 3:4.2.11-1ubuntu1.3
    • Обновитесь до 3:4.2.16-1
    • Обновитесь до 4.2.16
    • Обновитесь до 5.0.9
    • Обновитесь до 5.1.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  13. CVE-2024-45230

    Высокий · CVSS 7.5EPSS 25,77%Есть исправление

    CVE-2024-45230

    An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.

    n/a python-django python-django python-django django django django django python-django python-django python-django python-djangoОперационные системы Python
    • Обновитесь до 1:1.11.11-1ubuntu1.21+esm7
    • Обновитесь до 2:2.2.12-1ubuntu0.25
    • Обновитесь до 2:3.2.12-2ubuntu1.14
    • Обновитесь до 3:4.2.11-1ubuntu1.3
    • Обновитесь до 3:4.2.16-1
    • Обновитесь до 4.2.16
    • Обновитесь до 5.0.9
    • Обновитесь до 5.1.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  14. CVE-2024-25885

    Высокий · CVSS 7.5EPSS 0,64%Есть исправление

    CVE-2024-25885

    An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service (ReDOS) via supplying a crafted string.

    n/a xhtml2pdf xhtml2pdf xhtml2pdf xhtml2pdf xhtml2pdf xhtml2pdf xhtml2pdf xhtml2pdf xhtml2pdf xhtml2pdf xhtml2pdfОперационные системы Python
    • Обновитесь до 0.2.16+dfsg-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗

  15. CVE-2024-47211

    Средний · CVSS 5.3EPSS 0,66%Есть исправление

    CVE-2024-47211

    In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied image_source URLs when configured to convert images to a raw format for streaming.

    n/a ironic ironic ironic ironic ironic ironic ironic ironic ironic ironic ironicОперационные системы Python
    • Обновитесь до 1:26.1.0-1
    • Обновитесь до 23.0.3
    • Обновитесь до 24.1.3
    • Обновитесь до 26.1.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  16. CVE-2024-47529

    Средний · CVSS 4.8EPSS 0,35%Есть исправление

    OpenC3 COSMOS uses clear text storage of password/token (`GHSL-2024-129`)

    OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. OpenC3 COSMOS stores the password of a user unencrypted in the LocalStorage of a web browser. This makes the user password susceptible to exfiltration via Cross-site scripting (see GHSL-2024-128). This vulnerability is fixed in 5.19.0. This only affects Open Source edition, and not OpenC3 COSMOS Enterprise Edition.

    cosmos openc3 @openc3/tool-common openc3 openc3Python Node.js
    • Обновитесь до 5.19.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  17. CVE-2024-46977

    Средний · CVSS 5.3EPSS 0,91%Есть исправление

    OpenC3 COSMOS allows a path traversal via screen controller (`GHSL-2024-127`)

    OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. A path traversal vulnerability inside of LocalMode's open_local_file method allows an authenticated user with adequate permissions to download any .txt via the ScreensController#show on the web server COSMOS is running on (depending on the file permissions). This vulnerability is fixed in 5.19.0.

    cosmos openc3 openc3 openc3Python
    • Обновитесь до 5.19.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  18. CVE-2024-43795

    Средний · CVSS 5.1EPSS 0,48%Есть исправление

    OpenC3 COSMOS vulnerable to cross-site scripting in Login functionality (`GHSL-2024-128`)

    OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. The login functionality contains a reflected cross-site scripting (XSS) vulnerability. This vulnerability is fixed in 5.19.0. Note: This CVE only affects Open Source Edition, and not OpenC3 COSMOS Enterprise Edition.

    cosmos openc3 @openc3/tool-common openc3 openc3Python Node.js
    • Обновитесь до 5.19.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  19. GHSA-vx3h-qwqw-r2wq

    Средний · CVSS 5.3Есть исправление

    Inventree Server-Side Request Forgery vulnerability exposes server port/internal IP

    ### Impact The "download image from remote URL" feature can be abused by a malicious actor to potentially extract information about server side resources. Submitting a crafted URL (in place of a valid image) can raise a server side error, which is reported back to the user. This error message may contain sensitive information about the server side request, including information about the availability of the remote resource. ### Patches The solution to this vulnerability is to prevent the server from returning any specific information about the observed exception. Instead, a generic error message is returned to the client. This patch has

    inventreePython
    • Обновитесь до 0.16.5
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  20. CVE-2024-47532

    Высокий · CVSS 8.7EPSS 0,72%Есть исправление

    RestrictedPython information leakage via `AttributeError.obj` and the `string` module

    RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected (and potentially sensible) information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application does not require access to the module string, it can remove it from RestrictedPython.Utilities.utility_builtins or otherwise do not make it available in the restricted execution environment.

    restrictedpython restrictedpython restrictedpython restrictedpython restrictedpython restrictedpython restrictedpython restrictedpython restrictedpythonОперационные системы Python
    • Обновитесь до 4.0~b3-2ubuntu0.1~esm1
    • Обновитесь до 4.0~b3-3ubuntu0.1~esm1
    • Обновитесь до 6.2-1ubuntu0.24.04.1~esm1
    • Обновитесь до 7.3
    • Обновитесь до 8.0-1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →