{
    "id": "CVE-2013-4409",
    "published": "2019-11-04 21:15:11",
    "last_modified": "2026-06-16 23:57:10",
    "cvss_score": "9.8",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "cwe": "CWE-20",
    "description": "An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests.",
    "epss_score": "0.03649",
    "epss_percentile": "0.89306",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 0,
    "updated_at": "2026-10-09 18:17:12",
    "priority": {
        "rank": 3,
        "label": "In your normal cycle",
        "why": "Critical by CVSS (9.8), but no sign of active exploitation."
    },
    "products": [
        {
            "vendor": "fedoraproject",
            "product": "fedora"
        },
        {
            "vendor": "redhat",
            "product": "enterprise_linux"
        },
        {
            "vendor": "reviewboard",
            "product": "djblets"
        },
        {
            "vendor": "reviewboard",
            "product": "review_board"
        }
    ],
    "kev_detail": null,
    "exploits": [],
    "refs_list": [
        "http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120619.html",
        "http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119819.html",
        "http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119820.html",
        "http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119830.html",
        "http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119831.html",
        "http://www.securityfocus.com/bid/63029",
        "https://access.redhat.com/security/cve/cve-2013-4409",
        "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4409",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/88059",
        "https://security-tracker.debian.org/tracker/CVE-2013-4409",
        "http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120619.html",
        "http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119819.html",
        "http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119820.html",
        "http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119830.html",
        "http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119831.html",
        "http://www.securityfocus.com/bid/63029",
        "https://access.redhat.com/security/cve/cve-2013-4409",
        "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4409",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/88059",
        "https://security-tracker.debian.org/tracker/CVE-2013-4409"
    ]
}