Vendor/product archive

turbogears / turbogears2 CVEs

Beta · best-effort

2 CVEs tagged to turbogears / turbogears2 — 0 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to turbogears vendor archive

CVE-2009-5015

Published Nov 6, 2010

The URL dispatch mechanism in TurboGears2 (aka tg2) before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack ve…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2009-5014

Published Nov 6, 2010

The default quickstart configuration of TurboGears2 (aka tg2) before 2.0.2 has a weak cookie salt, which makes it easier for remote attackers to bypass repoze.who authentication v…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1