Skip to content
OpenAdvisories
High DLA-1047-1 1 CVE

supervisor - security update

Published Jul 31, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 supervisor 3.0a8-1.1+deb7u2

Vulnerabilities 1

  • High 8.8
    CVE-2017-11610 Public exploit Scanner template EPSS 88%

    Incorrect Default Permissions in Supervisor

    The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups.

    supervisor supervisor supervisor supervisor Debian Ubuntu Alpine PyPI