← Back

CVE-2009-5015

nvd nist
Published: Nov 6, 2010Modified: Apr 29, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

The URL dispatch mechanism in TurboGears2 (aka tg2) before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors.

Affected (19)

1 product
Turbogears2
Configuration A
19 vulnerable
Vulnerable SoftwareAffected Versions
Turbogears
version ≤ 2.1b2
Version 1.9.7a2
Version 1.9.7a3
Version 1.9.7a4
Version 1.9.7b1
Version 1.9.7b2
Version 2.0.1
Version 2.0 rc1
Version 2.0b1
Version 2.0b2
Version 2.0b3
Version 2.0b4
Version 2.0b5
Version 2.0b6
Version 2.0b7
Version 2.1a1
Version 2.1a2
Version 2.1a3
Version 2.1b1

Timeline

No history available yet.