medium6.8
CVE-2013-7489
Deserialization of Untrusted Data in Beaker
Impact
The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | Beaker | <= 1.11.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Beakerbrowser | Beaker | through 1.11.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1850105
- https://github.com/bbangert/beaker/issues/191
- https://www.openwall.com/lists/oss-security/2020/05/14/11
- https://github.com/advisories/GHSA-3cwm-7jmm-774w
- https://nvd.nist.gov/vuln/detail/CVE-2013-7489
- https://github.com/pypa/advisory-database/tree/main/vulns/beaker/PYSEC-2020-216.yaml