CVE-2011-1364: CSRF
First published: Sun Oct 30 2011(Updated: )
Cross-site request forgery (CSRF) vulnerability in _ah/admin/interactive/execute (aka the Interactive Console) in the SDK Console (aka Admin Console) in the Google App Engine Python SDK before 1.5.4 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary Python code via the code parameter.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google App Engine Python SDK | =1.4.3 | |
| Google App Engine Python SDK | =1.1.5 | |
| Google App Engine Python SDK | =1.3.4 | |
| Google App Engine Python SDK | =1.2.6 | |
| Google App Engine Python SDK | =1.2.2 | |
| Google App Engine Python SDK | =1.2.7 | |
| Google App Engine Python SDK | =1.1.7 | |
| Google App Engine Python SDK | =1.0.2 | |
| Google App Engine Python SDK | =1.1.3 | |
| Google App Engine Python SDK | =1.5.2 | |
| Google App Engine Python SDK | =1.1.0 | |
| Google App Engine Python SDK | =1.3.1 | |
| Google App Engine Python SDK | <=1.5.3 | |
| Google App Engine Python SDK | =1.0.1 | |
| Google App Engine Python SDK | =1.4.0 | |
| Google App Engine Python SDK | =1.1.2 | |
| Google App Engine Python SDK | =1.3.8 | |
| Google App Engine Python SDK | =1.3.3 | |
| Google App Engine Python SDK | =1.2.5 | |
| Google App Engine Python SDK | =1.2.0 | |
| Google App Engine Python SDK | =1.1.8 | |
| Google App Engine Python SDK | =1.1.9 | |
| Google App Engine Python SDK | =1.3.7 | |
| Google App Engine Python SDK | =1.3.2 | |
| Google App Engine Python SDK | =1.2.4 | |
| Google App Engine Python SDK | =1.2.1 | |
| Google App Engine Python SDK | =1.4.1 | |
| Google App Engine Python SDK | =1.2.3 | |
| Google App Engine Python SDK | =1.1.4 | |
| Google App Engine Python SDK | =1.5.1 | |
| Google App Engine Python SDK | =1.3.0 | |
| Google App Engine Python SDK | =1.3.6 | |
| Google App Engine Python SDK | =1.3.5 | |
| Google App Engine Python SDK | =1.1.1 | |
| Google App Engine Python SDK | =1.1.6 | |
| Google App Engine Python SDK | =1.5.0 | |
| Google App Engine Python SDK | =1.4.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2011-1364?
CVE-2011-1364 is considered a moderate severity vulnerability due to its potential for cross-site request forgery.
How do I fix CVE-2011-1364?
To fix CVE-2011-1364, upgrade your Google App Engine Python SDK to version 1.5.4 or later.
What kind of attacks can CVE-2011-1364 enable?
CVE-2011-1364 allows remote attackers to hijack the authentication of administrators and execute arbitrary commands.
Which versions of Google App Engine Python SDK are affected by CVE-2011-1364?
CVE-2011-1364 affects multiple versions including 1.4.3 and earlier versions of the Google App Engine Python SDK.
Is CVE-2011-1364 still relevant today?
While CVE-2011-1364 was identified over a decade ago, it is still relevant for systems running outdated versions of the SDK.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/remedy
- agent/severity
- agent/weakness
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/google
- canonical/google app engine python sdk
- version/google app engine python sdk/1.4.3
- version/google app engine python sdk/1.1.5
- version/google app engine python sdk/1.3.4
- version/google app engine python sdk/1.2.6
- version/google app engine python sdk/1.2.2
- version/google app engine python sdk/1.2.7
- version/google app engine python sdk/1.1.7
- version/google app engine python sdk/1.0.2
- version/google app engine python sdk/1.1.3
- version/google app engine python sdk/1.5.2
- version/google app engine python sdk/1.1.0
- version/google app engine python sdk/1.3.1
- version/google app engine python sdk/1.5.3
- version/google app engine python sdk/1.0.1
- version/google app engine python sdk/1.4.0
- version/google app engine python sdk/1.1.2
- version/google app engine python sdk/1.3.8
- version/google app engine python sdk/1.3.3
- version/google app engine python sdk/1.2.5
- version/google app engine python sdk/1.2.0
- version/google app engine python sdk/1.1.8
- version/google app engine python sdk/1.1.9
- version/google app engine python sdk/1.3.7
- version/google app engine python sdk/1.3.2
- version/google app engine python sdk/1.2.4
- version/google app engine python sdk/1.2.1
- version/google app engine python sdk/1.4.1
- version/google app engine python sdk/1.2.3
- version/google app engine python sdk/1.1.4
- version/google app engine python sdk/1.5.1
- version/google app engine python sdk/1.3.0
- version/google app engine python sdk/1.3.6
- version/google app engine python sdk/1.3.5
- version/google app engine python sdk/1.1.1
- version/google app engine python sdk/1.1.6
- version/google app engine python sdk/1.5.0
- version/google app engine python sdk/1.4.2