Search criteria

2 vulnerabilities found for python-fedora by fedoraproject

CVE-2017-1002150 (GCVE-0-2017-1002150)

Vulnerability from nvd – Published: 2017-09-14 13:00 – Updated: 2024-08-05 22:08
VLAI
Summary
python-fedora 0.8.0 and lower is vulnerable to an open redirect resulting in loss of CSRF protection
Severity
No CVSS data available.
CWE
Assigner
References
Impacted products
Vendor Product Version
Fedora Project Infrastructure Python-Fedora Affected: unspecified , ≤ 0.8.0 (custom)
Create a notification for this product.
Date Public
2017-09-14 00:00
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T22:08:11.474Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929.patch"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Python-Fedora",
          "vendor": "Fedora Project Infrastructure",
          "versions": [
            {
              "lessThanOrEqual": "0.8.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2017-07-22T00:00:00.000Z",
      "datePublic": "2017-09-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "python-fedora 0.8.0 and lower is vulnerable to an open redirect resulting in loss of CSRF protection"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-601",
              "description": "CWE-601",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-14T12:57:02.000Z",
        "orgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5",
        "shortName": "fedora"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929.patch"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "patrick@puiterwijk.org",
          "DATE_ASSIGNED": "2017-07-22T15:30Z",
          "ID": "CVE-2017-1002150",
          "REQUESTER": "patrick@puiterwijk.org",
          "STATE": "PUBLIC",
          "UPDATED": "2017-07-22T15:30Z"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Python-Fedora",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_value": "0.8.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Fedora Project Infrastructure"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "python-fedora 0.8.0 and lower is vulnerable to an open redirect resulting in loss of CSRF protection"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-601"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929.patch",
              "refsource": "MISC",
              "url": "https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929.patch"
            },
            {
              "name": "https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929",
              "refsource": "MISC",
              "url": "https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5",
    "assignerShortName": "fedora",
    "cveId": "CVE-2017-1002150",
    "datePublished": "2017-09-14T13:00:00.000Z",
    "dateReserved": "2017-08-23T00:00:00.000Z",
    "dateUpdated": "2024-08-05T22:08:11.474Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-1002150 (GCVE-0-2017-1002150)

Vulnerability from cvelistv5 – Published: 2017-09-14 13:00 – Updated: 2024-08-05 22:08
VLAI
Summary
python-fedora 0.8.0 and lower is vulnerable to an open redirect resulting in loss of CSRF protection
Severity
No CVSS data available.
CWE
Assigner
References
Impacted products
Vendor Product Version
Fedora Project Infrastructure Python-Fedora Affected: unspecified , ≤ 0.8.0 (custom)
Create a notification for this product.
Date Public
2017-09-14 00:00
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T22:08:11.474Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929.patch"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Python-Fedora",
          "vendor": "Fedora Project Infrastructure",
          "versions": [
            {
              "lessThanOrEqual": "0.8.0",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "dateAssigned": "2017-07-22T00:00:00.000Z",
      "datePublic": "2017-09-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "python-fedora 0.8.0 and lower is vulnerable to an open redirect resulting in loss of CSRF protection"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-601",
              "description": "CWE-601",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-14T12:57:02.000Z",
        "orgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5",
        "shortName": "fedora"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929.patch"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "patrick@puiterwijk.org",
          "DATE_ASSIGNED": "2017-07-22T15:30Z",
          "ID": "CVE-2017-1002150",
          "REQUESTER": "patrick@puiterwijk.org",
          "STATE": "PUBLIC",
          "UPDATED": "2017-07-22T15:30Z"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Python-Fedora",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_value": "0.8.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Fedora Project Infrastructure"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "python-fedora 0.8.0 and lower is vulnerable to an open redirect resulting in loss of CSRF protection"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-601"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929.patch",
              "refsource": "MISC",
              "url": "https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929.patch"
            },
            {
              "name": "https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929",
              "refsource": "MISC",
              "url": "https://github.com/fedora-infra/python-fedora/commit/b27f38a67573f4c989710c9bfb726dd4c1eeb929"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5",
    "assignerShortName": "fedora",
    "cveId": "CVE-2017-1002150",
    "datePublished": "2017-09-14T13:00:00.000Z",
    "dateReserved": "2017-08-23T00:00:00.000Z",
    "dateUpdated": "2024-08-05T22:08:11.474Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}