https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 09:43:30 +0000 https://cve.radiocsirt.org/vuln/cve-2019-12300 <p>Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a user. If an attacker has a token allowing them to read the user details of a victim, they can login as the victim.</p> <p>Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a user. If an attacker has a token allowing them to read the user details of a victim, they can login as the victim.</p> https://cve.radiocsirt.org/vuln/cve-2019-12300 https://cve.radiocsirt.org/vuln/ghsa-g86p-hgx5-2pfh <p><strong>Affected:</strong> PyPI: buildbot</p> <p>Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a user. If an attacker has a token allowing them to read the user details of a victim, they can login as the victim.</p> <p><strong>Affected:</strong> PyPI: buildbot</p> <p>Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a user. If an attacker has a token allowing them to read the user details of a victim, they can login as the victim.</p> https://cve.radiocsirt.org/vuln/ghsa-g86p-hgx5-2pfh