CVE-2011-1364Not scoredCWE-352

CVE-2011-1364: Google App Engine Python Sdk vulnerability

Google · App Engine Python Sdk

Affected: Google App Engine Python Sdk · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.5%probability of exploitation in the next 30 days

43rd percentile

050100

Higher than 43% of scored CVEs

Not scored yet. The CVE record carries no CVSS score.

DescriptionCVE.org

Cross-site request forgery (CSRF) vulnerability in _ah/admin/interactive/execute (aka the Interactive Console) in the SDK Console (aka Admin Console) in the Google App Engine Python SDK before 1.5.4 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary Python code via the code parameter.

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Cross-Site Request Forgery
Vendor: Google
Published: October 2011
Band: Unlikely (under 1%), October 2011

CoverageNo articles yet

No CyberSIXT article names CVE-2011-1364 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.