VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Oct 30, 2011· Updated Apr 29, 2026

CVE-2011-1364

CVE-2011-1364

Description

Cross-site request forgery (CSRF) vulnerability in _ah/admin/interactive/execute (aka the Interactive Console) in the SDK Console (aka Admin Console) in the Google App Engine Python SDK before 1.5.4 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary Python code via the code parameter.

Affected products

37
  • Google/App Engine Python Sdk37 versions
    cpe:2.3:a:google:app_engine_python_sdk:*:*:*:*:*:*:*:*+ 36 more
    • cpe:2.3:a:google:app_engine_python_sdk:*:*:*:*:*:*:*:*range: <=1.5.3
    • cpe:2.3:a:google:app_engine_python_sdk:1.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.1.7:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.1.8:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.1.9:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.2.6:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.2.7:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.3.4:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.3.6:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.3.7:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.3.8:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.4.3:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:google:app_engine_python_sdk:1.5.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.