CVE-2013-2217
No CVSS score yet. EPSS 0.6% chance of exploitation in the next 30 days. Fixed in suds 0.7.0, 1.0.0.
cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/.
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
- CWE
- CWE-59
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jeff_ortel:suds
- opensuse:opensuse
- redhat:enterprise_linux
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-vpqp-hx68-p2wx | PyPI | suds | <1.0.0 | 1.0.0 |
| GHSA-vpqp-hx68-p2wx | PyPI | suds-py3 | <1.4.4.1 | 1.4.4.1 |
| PYSEC-2013-32 | PyPI | suds | <0.7.0 | 0.7.0 |
| PYSEC-2013-33 | PyPI | suds-py3 | <1.4.4.1 | 1.4.4.1 |