CVE-2023-41419: Gevent allows remote attacker to escalate… – CVSS 9.8 · Watchpost

← All vulnerabilities

Gevent allows remote attacker to escalate privileges

심각 9.8CVE-2023-41419 · GHSA-x7m3-jprg-wc5g · PYSEC-2023-177 · Published 25/09/2023 · updated 17/06/2026

요약

CVE-2023-41419은(는) gevent, gevent (gevent)에 영향을 주는 심각 (CVSS 9.8) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.8%, 전체 취약점의 78.5%보다 높음.
조치: 23.9.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
gevent PyPI	`< 23.9.0`	`23.9.0`
gevent gevent	`< 23.9.0`	`23.9.0`

Description

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.

NVD description

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.

References

nvd.nist.gov/vuln/detail/CVE-2023-41419 · ADVISORY
gevent/gevent · WEB
gevent/gevent commit 2f53c85 · WEB
gevent/gevent · PACKAGE
pypa/advisory-database · WEB
lists.debian.org/debian-lts-announce/2025/11/msg00020.html · WEB
gevent.org/changelog.html · WEB
GitHub Advisory GHSA-x7m3-jprg-wc5g · ADVISORY

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free