What is GHSA-9jp4-68vc-r8wq?

GHSA-9jp4-68vc-r8wq is a security advisory published by GitHub Security Advisories with High severity. FormEncode Access Restrictions Bypass

Which CVE IDs does GHSA-9jp4-68vc-r8wq cover?

GHSA-9jp4-68vc-r8wq covers the following CVE IDs: CVE-2008-6547. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9jp4-68vc-r8wq?

GHSA-9jp4-68vc-r8wq has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-9jp4-68vc-r8wq?

GHSA-9jp4-68vc-r8wq affects 1 product, including: pip/FormEncode:= 1.0.

GHSA-9jp4-68vc-r8wqHighCVSS 7.5

FormEncode Access Restrictions Bypass

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

September 20, 2024

🔗 CVE IDs covered (1)

CVE-2008-6547 →

📋 Description

schema.py in FormEncode for Python (python-formencode) 1.0 does not apply the chained_validators feature, which allows attackers to bypass intended access restrictions via unknown vectors.

🎯 Affected products1

pip/FormEncode:= 1.0

🔗 References (10)

https://nvd.nist.gov/vuln/detail/CVE-2008-6547
https://exchange.xforce.ibmcloud.com/vulnerabilities/43878
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00607.html
http://sourceforge.net/tracker/download.php?group_id=91231&atid=596416&file_id=271779&aid=1925164
http://sourceforge.net/tracker/index.php?func=detail&aid=1925164&group_id=91231&atid=596416
https://web.archive.org/web/20080905200034/http://secunia.com/advisories/31081
https://web.archive.org/web/20081013102442/http://secunia.com/advisories/31163
https://web.archive.org/web/20200228145643/http://www.securityfocus.com/bid/30282
https://github.com/pypa/advisory-database/tree/main/vulns/formencode/PYSEC-2009-5.yaml
https://github.com/advisories/GHSA-9jp4-68vc-r8wq