CVE-2013-4409

An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests.

• CWE-20

• http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120619.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119819.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119820.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119830.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119831.htmlMailing List, Third Party Advisory
• http://www.securityfocus.com/bid/63029Third Party Advisory, VDB Entry
• https://access.redhat.com/security/cve/cve-2013-4409Broken Link
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4409Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/88059Third Party Advisory, VDB Entry
• https://security-tracker.debian.org/tracker/CVE-2013-4409Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120619.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119819.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119820.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119830.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119831.htmlMailing List, Third Party Advisory
• http://www.securityfocus.com/bid/63029Third Party Advisory, VDB Entry
• https://access.redhat.com/security/cve/cve-2013-4409Broken Link
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4409Issue Tracking, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/88059Third Party Advisory, VDB Entry
• https://security-tracker.debian.org/tracker/CVE-2013-4409Third Party Advisory

Published

Nov 4, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-4403Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2013-4404cumin in Red Hat Enterprise MRG Grid 2.4 does not properly e…
• CVE-2013-4405Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2013-4406The Quick Tabs module 6.x-2.x before 6.x-2.2, 6.x-3.x before…
• CVE-2013-4407HTTP::Body::Multipart in the HTTP-Body module for Perl (1.07…
• CVE-2013-4408Heap-based buffer overflow in the dcerpc_read_ncacn_packet_d…
• CVE-2013-4410ReviewBoard: has an access-control problem in REST API7.5
• CVE-2013-4411Review Board: URL processing gives unauthorized users access…4.3
• CVE-2013-4412slim has NULL pointer dereference when using crypt() method …7.5
• CVE-2013-4413Directory traversal vulnerability in controller/concerns/ren…
• CVE-2013-4414Cross-site scripting (XSS) vulnerability in the web interfac…
• CVE-2013-4415Multiple cross-site scripting (XSS) vulnerabilities in Space…