An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-gevent | Nov 7, 2024 | Sep 25, 2023 |
| Debian | — | Upgrade python-gevent | Nov 26, 2025 | Nov 26, 2025 |
| Oracle_linux | — | Upgrade python3-gevent | Nov 11, 2024 | Aug 31, 2023 |
| Redhat_linux | — | Upgrade python3-gevent-debuginfoUpgrade python3-geventUpgrade python-gevent-debugsourceNo solution exists | Oct 16, 2024 | Sep 25, 2023 |
| Rocky_linux | — | Upgrade python3-gevent-debuginfoUpgrade python-gevent-debugsourceUpgrade python3-gevent | Jun 1, 2026 | May 29, 2026 |
| Suse | — | Upgrade python-gevent-docUpgrade python3-geventUpgrade python2-gevent | Oct 18, 2023 | Sep 25, 2023 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 25, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub