Vulnerability in Turbogears Turbogears2
CVE-2009-5015
The URL dispatch mechanism in TurboGears2 (aka tg2) before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified impact and attack vectors.
EPSS: 0.011 (60.9th percentile) — read the EPSS interpretation.
Affected products
- Turbogears Turbogears2 — versions 1.9.7b1, 2.0b3, 2.0b6
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_MLIST)