Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-3841-1
HistoryDec 10, 2018 - 12:00 a.m.

lxml vulnerability

2018-12-1000:00:00
ubuntu.com
41

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

74.1%

JSON

Releases

  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • lxml - pythonic binding for the libxml2 and libxslt libraries

Details

It was discovered that lxml incorrectly handled certain HTML files.
An attacker could possibly use this issue to conduct cross-site scripting
(XSS) attacks.

OSVersionArchitecturePackageVersionFilename
Ubuntu18.04noarchpython-lxml< 4.2.1-1ubuntu0.1UNKNOWN
Ubuntu18.04noarchpython-lxml-dbg< 4.2.1-1ubuntu0.1UNKNOWN
Ubuntu18.04noarchpython-lxml-doc< 4.2.1-1ubuntu0.1UNKNOWN
Ubuntu18.04noarchpython3-lxml< 4.2.1-1ubuntu0.1UNKNOWN
Ubuntu18.04noarchpython3-lxml-dbg< 4.2.1-1ubuntu0.1UNKNOWN
Ubuntu16.04noarchpython-lxml< 3.5.0-1ubuntu0.1UNKNOWN
Ubuntu16.04noarchpython-lxml-dbg< 3.5.0-1ubuntu0.1UNKNOWN
Ubuntu16.04noarchpython-lxml-doc< 3.5.0-1ubuntu0.1UNKNOWN
Ubuntu16.04noarchpython3-lxml< 3.5.0-1ubuntu0.1UNKNOWN
Ubuntu16.04noarchpython3-lxml-dbg< 3.5.0-1ubuntu0.1UNKNOWN
Rows per page:
1-10 of 161

Related

nessus 20
openvas 19
veracode 1
fedora 2
cbl_mariner 2
ubuntu 1
mageia 1
redhatcve 1
debian 2
osv 4
nvd 1
cve 1
prion 1
ubuntucve 1
github 1
debiancve 1
cvelist 1
suse 1
photon 2
ibm 1
nessus
nessus
RHEL 8 : python-lxml (Unpatched Vulnerability)
2024-05-11 00:00:00
Fedora 28 : python-lxml (2018-67e98d4b7a)
2019-01-03 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : lxml vulnerability (USN-3841-1)
2018-12-11 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2018-0497)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-3841-1)
2018-12-11 00:00:00
Ubuntu: Security Advisory (USN-3841-2)
2022-08-26 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2018-09-19 01:17:20
fedora
fedora
[SECURITY] Fedora 29 Update: python-lxml-4.2.5-1.fc29
2018-12-21 19:42:19
[SECURITY] Fedora 28 Update: python-lxml-4.2.5-1.fc28
2019-01-03 02:27:09
cbl_mariner
cbl_mariner
CVE-2018-19787 affecting package python-lxml 4.2.4-7
2021-08-11 06:39:25
CVE-2018-19787 affecting package python-lxml for versions less than 4.8.0-1
2022-04-26 19:57:36
ubuntu
ubuntu
lxml vulnerability
2018-12-10 00:00:00
mageia
mageia
Updated python-lxml packages fix security vulnerability
2019-01-01 01:42:09
redhatcve
redhatcve
CVE-2018-19787
2018-12-17 23:08:11
debian
debian
[SECURITY] [DLA 2467-1] lxml security update
2020-11-26 18:33:14
[SECURITY] [DLA 1604-1] lxml security update
2018-12-10 08:57:48
osv
osv
CVE-2018-19787
2018-12-02 10:29:00
Improper Neutralization of Input During Web Page Generation in LXML
2022-05-13 01:13:21
PYSEC-2018-12
2018-12-02 10:29:00
nvd
nvd
CVE-2018-19787
2018-12-02 10:29:00
cve
cve
CVE-2018-19787
2018-12-02 10:29:00
prion
prion
Design/Logic Flaw
2018-12-02 10:29:00
ubuntucve
ubuntucve
CVE-2018-19787
2018-12-02 00:00:00
github
github
Improper Neutralization of Input During Web Page Generation in LXML
2022-05-13 01:13:21
debiancve
debiancve
CVE-2018-19787
2018-12-02 10:29:00
cvelist
cvelist
CVE-2018-19787
2018-12-02 10:00:00
suse
suse
Security update for python-lxml (important)
2022-03-10 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2022-0406
2022-06-17 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0406
2022-06-17 00:00:00
ibm
ibm
Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
2024-05-09 12:31:16

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

74.1%

JSON
Related for USN-3841-1
nessus20openvas19veracode1fedora2cbl_mariner2ubuntu1mageia1redhatcve1debian2osv4nvd1cve1prion1ubuntucve1github1debiancve1cvelist1suse1photon2ibm1