App Engine Python Sdk (Google) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 96 known versions, newest CVE from 2011-10-30. Vendor: Google.

CVEs of App Engine Python Sdk

• CVE-2011-4213 - CVSS 7.2 (high), 2011-10-30: The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent use of the os module, which allows local users to bypass…
• CVE-2011-4212 - CVSS 7.2 (high), 2011-10-30: The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent os.popen calls, which allows local users to bypass intended…
• CVE-2011-4211 - CVSS 7.2 (high), 2011-10-30: The FakeFile implementation in the sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly control the opening of files, which…
• CVE-2011-1364 - CVSS 6.8 (medium), 2011-10-30: Cross-site request forgery (CSRF) vulnerability in _ah/admin/interactive/execute (aka the Interactive Console) in the SDK Console (aka Admin Console) in the…