Vulnerabilities

TI-2018-08668 CVE-2018-12088 · GHSA-49xr-rr65-3xpc

S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which…

LOW 37

S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which an attacker who controls the backend can present old versions of the filesystem metadata database as up-to-date, temporarily injec…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01855 Published 2018-06-10 No fix listed CWE-20

TI-2014-00464 CVE-2014-0485 · GHSA-cqgg-9hfr-83w7

S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote…

MEDIUM 40

S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in (1) common.py or (2) local.py in backends/.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0457 Published 2014-09-02 No fix listed CWE-94

Vulnerabilities

Filters

S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which…

S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote…