Skip to content
OpenAdvisories
Unscored DSA-1754-1 1 CVE

roundup - privilege escalation

Published Apr 9, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 4.0 roundup 1.2.1-10+etch1
Debian · 5.0 roundup 1.4.4-4+lenny1

Vulnerabilities 1

  • Medium —
    CVE-2009-2737

    Roundup Improper Access Control

    The EditCSVAction function in cgi/actions.py in Roundup 1.2 before 1.2.1, 1.4 through 1.4.6, and possibly other versions does not properly check permissions, which allows remote authenticated users with edit or create privileges for a class to modify arbitrar…

    roundup PyPI