CVE-2011-1364: CSRF
Cross-site request forgery (CSRF) vulnerability in ah/admin/interactive/execute (aka the Interactive Console) in the SDK Console (aka Admin Console) in the Google App Engine Python SDK before 1.5.4 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary Python code via the code parameter.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1364?
CVE-2011-1364 is considered a moderate severity vulnerability due to its potential for cross-site request forgery.
How do I fix CVE-2011-1364?
To fix CVE-2011-1364, upgrade your Google App Engine Python SDK to version 1.5.4 or later.
What kind of attacks can CVE-2011-1364 enable?
CVE-2011-1364 allows remote attackers to hijack the authentication of administrators and execute arbitrary commands.
Which versions of Google App Engine Python SDK are affected by CVE-2011-1364?
CVE-2011-1364 affects multiple versions including 1.4.3 and earlier versions of the Google App Engine Python SDK.
Is CVE-2011-1364 still relevant today?
While CVE-2011-1364 was identified over a decade ago, it is still relevant for systems running outdated versions of the SDK.