Turbogears Turbogears2
2 CVEs affecting Turbogears Turbogears2. Latest disclosed: 2010-11-06. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2009-5015 | | 2010-11-06 | The URL dispatch mechanism in TurboGears2 (aka tg2) before 2.0.2 exposes controller methods even when an @expose decoration is not used, which has unspecified… | |
CVE-2009-5014 | | 2010-11-06 | The default quickstart configuration of TurboGears2 (aka tg2) before 2.0.2 has a weak cookie salt, which makes it easier for remote attackers to bypass repoze… |