En resumen
- CVE-2013-2217 es una vulnerabilidad BAJO (CVSS 1.2) que afecta a suds, suds-py3, suds (jeff ortel).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.56%, mayor que el 46.8% de las vulnerabilidades.
- Solución: actualizar a 0.7.0, 1.0.0, 1.4.4.1 o posterior.
| Package | Affected versions | Patched versions |
|---|
| suds PyPI | < 0.7.0< 1.0.0
| 0.7.01.0.0
|
| suds-py3 PyPI | < 1.4.4.1
| 1.4.4.1
|
| suds | = 0.4
| No fix yet |
Description
cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/.
NVD description
cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free