Skip to content
OpenAdvisories
High DSA-3942-1 1 CVE

supervisor - security update

Published Aug 13, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 8 supervisor 3.0r1-1+deb8u1
Debian · 9 supervisor 3.3.1-1+deb9u1

Vulnerabilities 1

  • High 8.8
    CVE-2017-11610 Public exploit Scanner template EPSS 88%

    Incorrect Default Permissions in Supervisor

    The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups.

    supervisor supervisor supervisor supervisor Debian Ubuntu Alpine PyPI