dirac vulnerabilities (PyPI)
6 vulnerabilities.
-
diracPyPI DIRAC: SQL injection and lack of access control in PilotManager service 8.5 High -
diracPyPI DIRAC: Pilot code downloaded over unverified HTTPS connection 8.1 High -
diracPyPI DIRAC: RCE in FileCatalog DatasetManager via SQL injection + eval 9.9 Critical -
diracPyPI DIRAC: RCE in RequestManager due to eval on untrusted input 9.9 Critical -
diracPyPI DIRAC: Unauthorized users can read proxy contents during generation 8.1 High -
diracPyPI TokenManager not checking permissions on cached tokens in DIRAC 9.1 Critical