Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Petter Urkedal

#30284of 53,633
8.7Total CVSS
Vulnerabilities · 1
PT-2009-2017
8.7
2009-03-30
Python · Formencode · CVE-2008-6547
**Name of the Vulnerable Software and Affected Versions** FormEncode for Python (python-formencode) version 1.0 **Description** The issue allows attackers to bypass intended access restrictions via unknown vectors because the `chained validators` feature is not applied in `schema.py`. **Recommendations** For version 1.0, consider applying the `chained validators` feature to `schema.py` to prevent attackers from bypassing access restrictions. As a temporary workaround, review and manually enforce access restrictions to minimize the risk of exploitation.