PT-2020-7584 · Beaker+1 · Beaker+1

Matheusbrato · Published 2020-06-26 · Updated 2022-05-05 · CVE-2013-7489

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Beaker library versions through 1.11.0

Description The issue concerns the deserialization of untrusted data, which could potentially lead to arbitrary code execution.

Recommendations For versions through 1.11.0, update to a version later than 1.11.0 to resolve the issue.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2013-7489

GHSA-3CWM-7JMM-774W

PYSEC-2020-216

Affected Products

Beaker

Debian

References · 16

• https://osv.dev/vulnerability/GHSA-3cwm-7jmm-774w · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-7489 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2013-7489 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2013-7489 · Security Note
• https://osv.dev/vulnerability/PYSEC-2020-216 · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-7489 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2013-7489 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-7489 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-7489 · Vendor Advisory
• https://github.com/bbangert/beaker/issues/191 · Note
• https://github.com/bbangert/beaker · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/beaker/PYSEC-2020-216.yaml · Note
• https://t.me/cibsecurity/13090 · Telegram Post
• https://bugzilla.redhat.com/show_bug.cgi?id=1850105 · Note
• https://github.com/advisories/GHSA-3cwm-7jmm-774w · Note