Cross-site scripting in pywb

🗓️ 02 Sep 2021 17:18:16Reported by GitHub Advisory DatabaseType

Webrecorder pywb XSS vulnerabilit

Reporter	Title	Published	Views	Family All 7
CVE	CVE-2021-39286	18 Aug 202118:15	–	cve
Prion	Cross site scripting	18 Aug 202118:15	–	prion
NVD	CVE-2021-39286	18 Aug 202118:15	–	nvd
OSV	PYSEC-2021-120	18 Aug 202118:15	–	osv
OSV	Cross-site scripting in pywb	2 Sep 202117:16	–	osv
OSV	CVE-2021-39286	18 Aug 202118:15	–	osv
Cvelist	CVE-2021-39286	18 Aug 202117:31	–	cvelist

Vulners

Node

webrecorder pywbRange<2.6.0

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-39286
github	www.github.com/webrecorder/pywb/commit/f7bd84cdacdd665ff73ae8d09a202f60be2ebae9
github	www.github.com/webrecorder/pywb/compare/v-2.5.0...v-2.6.0
github	www.github.com/advisories/GHSA-947x-pv47-pp3q
github	www.github.com/pypa/advisory-database/tree/main/vulns/pywb/PYSEC-2021-120.yaml

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Sep 2021 17:16Current

5.8Medium risk

Vulners AI Score5.8

CVSS24.3

CVSS36.1

EPSS0.0024

CWE-79