{"action":"Upgrade roundup to 1.4.5 or later.","affected":[{"fixed":"1.4.5","introduced":"0"}],"component":"roundup","cve_ids":["CVE-2008-1475"],"ecosystem":"PyPI","epss":0.01758,"exploited":false,"fixed_versions":["1.4.5"],"ghsa_id":"GHSA-j59j-h3g7-cpmf","id":"tcs_01M5KFN4MDPGH7FYZPDPZ7J9DH","modified_at":"2025-04-09T16:01:37.887490Z","published_at":"2022-05-01T23:40:33Z","references":["https://osv.dev/vulnerability/GHSA-j59j-h3g7-cpmf","https://nvd.nist.gov/vuln/detail/CVE-2008-1475","https://github.com/roundup-tracker/roundup/commit/c00b7e5801f8baa246fa76b4aad5287882310189","https://bugzilla.redhat.com/show_bug.cgi?id=436546","https://exchange.xforce.ibmcloud.com/vulnerabilities/41240","https://github.com/pypa/advisory-database/tree/main/vulns/roundup/PYSEC-2008-10.yaml","https://github.com/roundup-tracker/roundup","http://security.gentoo.org/glsa/glsa-200805-21.xml","http://sourceforge.net/tracker/index.php?func=detail&aid=1907211&group_id=31577&atid=402788","http://www.redhat.com/archives/fedora-package-announce/2008-March/msg00264.html","http://www.redhat.com/archives/fedora-package-announce/2008-March/msg00375.html","http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00452.html","http://www.redhat.com/archives/fedora-package-announce/2008-November/msg00478.html"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-j59j-h3g7-cpmf","url":"https://osv.dev/vulnerability/GHSA-j59j-h3g7-cpmf"}],"summary":"Roundup xml-rpc server improper check of property permissions"}