CVE-2014-3593

Severity: medium (CVSS 6.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-10-15 · updated 2026-06-17
Weakness: CWE-94

Description

Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain permissions to execute arbitrary Python code via a crafted cluster configuration.

Affected products

Scientificlinux Luci: 0.26.0

References

http://rhn.redhat.com/errata/RHSA-2014-1390.html
https://bugzilla.redhat.com/show_bug.cgi?id=989005
http://rhn.redhat.com/errata/RHSA-2014-1390.html
https://bugzilla.redhat.com/show_bug.cgi?id=989005

Get alerted when CVE-2014-3593 or the next vulnerability affects your stack