Lucene search
GoogleOSV:GHSA-5JQ3-8437-X35PHistoryApr 23, 2022 - 12:40 a.m.
Multiple cross-site scripting (XSS) vulnerabilities in Roundup
2022-04-2300:40:39
Google
osv.dev
12
multiple cross-site scripting
roundup
remote attackers
arbitrary web script
html
issue*
EPSS
0.004
Percentile
72.4%
Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML via the (1) @ok_message or (2) @error_message parameter to issue*.
References
hg.code.sf.net/p/roundup/code
issues.roundup-tracker.org/issue2550724
www.openwall.com/lists/oss-security/2012/11/10/2
www.openwall.com/lists/oss-security/2013/02/13/8
bugzilla.redhat.com/show_bug.cgi?id=722672
github.com/advisories/GHSA-5jq3-8437-x35p
github.com/pypa/advisory-database/tree/main/vulns/roundup/PYSEC-2020-212.yaml
nvd.nist.gov/vuln/detail/CVE-2012-6133
pypi.python.org/pypi/roundup/1.4.20
Related
ubuntucve
ubuntucve
CVE-2012-6133
2020-01-30 00:00:00
prion
prion
Cross site scripting
2020-01-30 21:15:00
osv
osv
PYSEC-2020-212
2020-01-30 21:15:00
roundup - security update
2015-08-23 00:00:00
cvelist
cvelist
CVE-2012-6133
2020-01-30 20:22:09
nvd
nvd
CVE-2012-6133
2020-01-30 21:15:13
github
github
Multiple cross-site scripting (XSS) vulnerabilities in Roundup
2022-04-23 00:40:39
cve
cve
CVE-2012-6133
2020-01-30 21:15:13
veracode
veracode
Cross-Site Scripting (XSS)
2022-04-27 08:16:03
openvas
openvas
Debian: Security Advisory (DLA-298-1)
2023-03-08 00:00:00
debian
debian
[SECURITY] [DLA 298-1] roundup security update
2015-08-23 16:11:49
nessus
nessus
Debian DLA-298-1 : roundup security update
2015-08-24 00:00:00