peter bassill · operator
$ cve CVE-2013-4409 JSON

CVE-2013-4409

9.8
CRITICAL · CVSS 3.1 · EPSS 3.6% (pctl 89)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS3.65% — more likely to be exploited than 89% of all CVEs
WeaknessCWE-20
On CISA KEVno
Public exploitnone known
Published2019-11-04
Last modified2026-06-16

Affected (4)

VendorProduct
fedoraprojectfedora
redhatenterprise linux
reviewboarddjblets
reviewboardreview board

References

→ the Explorer  ·  watch your stack  ·  NVD