https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:06:04 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-16068 cnvd-2019-16068 https://cve.radiocsirt.org/vuln/cnvd-2019-16068 https://cve.radiocsirt.org/vuln/euvd-2026-54964 EUVD-2026-54964 https://cve.radiocsirt.org/vuln/euvd-2026-54964 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12300 <p>Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a user. If an attacker has a token allowing them to read the user details of a victim, they can login as the victim.</p> <p>Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a user. If an attacker has a token allowing them to read the user details of a victim, they can login as the victim.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-12300 https://cve.radiocsirt.org/vuln/ghsa-g86p-hgx5-2pfh <p><strong>Affected:</strong> PyPI: buildbot</p> <p>Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a user. If an attacker has a token allowing them to read the user details of a victim, they can login as the victim.</p> <p><strong>Affected:</strong> PyPI: buildbot</p> <p>Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a user. If an attacker has a token allowing them to read the user details of a victim, they can login as the victim.</p> https://cve.radiocsirt.org/vuln/ghsa-g86p-hgx5-2pfh https://cve.radiocsirt.org/vuln/gsd-2019-12300 gsd-2019-12300 https://cve.radiocsirt.org/vuln/gsd-2019-12300 https://cve.radiocsirt.org/vuln/pysec-2019-6 <p><strong>Affected:</strong> PyPI: buildbot</p> <p>Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a user. If an attacker has a token allowing them to read the user details of a victim, they can login as the victim.</p> <p><strong>Affected:</strong> PyPI: buildbot</p> <p>Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a user. If an attacker has a token allowing them to read the user details of a victim, they can login as the victim.</p> https://cve.radiocsirt.org/vuln/pysec-2019-6 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-12300 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: buildbot, Ubuntu:20.04:LTS: buildbot</p> <p>Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a user. If an attacker has a token allowing them to read the user details of a victim, they can login as the victim.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: buildbot, Ubuntu:20.04:LTS: buildbot</p> <p>Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a user. If an attacker has a token allowing them to read the user details of a victim, they can login as the victim.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-12300