Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

SciPy Weave Creates Insecure Temporary Folders

CVE-2013-4251 · published 7 years ago
Summary

The SciPy Weave component creates temporary directories without adequate security, allowing unauthorized access to sensitive data. This could lead to data theft or tampering. Update to SciPy version 0.12.1 or later to fix the issue.

What to do
  • Update scipy developers scipy to version 0.12.1.
  • Update scipy scipy to version 0.12.1 or later.
Affected software
Ecosystem VendorProductAffected versions
pip scipy developers scipy < 0.12.1
Fix: upgrade to 0.12.1
– scipy scipy < 0.12.1
cpe:2.3:a:scipy:scipy:*:*:*:*:*:*:*:*
– fedoraproject fedora 18
19
20
cpe:2.3:o:fedoraproject:fedora:18:*:*:*:*:*:*:*
– redhat enterprise_linux 6.0
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
– debian debian_linux 8.0
9.0
10.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Original advisory text
The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.
The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-269Improper Privilege Management
Timeline
Published4 Nov 2019
Updated4 Nov 2026
First seen6 Mar 2026
Sources
GHSA-xp76-357g-9wqq · GHSA
CVE-2013-4251 · NVD
Track software like this
Free during beta