Lucene search

K

GoogleOSV:PYSEC-2014-16

HistoryApr 11, 2014 - 3:55 p.m.

PYSEC-2014-16

2014-04-1115:55:00

Google

osv.dev

6

0.003 Low

EPSS

Percentile

65.3%

Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the @action parameter to support/issue1.

CPENameOperatorVersion
roundupeq0.7.11
roundupeq1.3.0
roundupeq0.7.12
roundupeq1.4.0
roundupeq0.6.11
roundupeq0.9.0b1
roundupeq0.8.1
roundupeq1.1.0
roundupeq1.4.1
roundupeq1.0.1

Rows per page:

1-10 of 561

References

issues.roundup-tracker.org/issue2550711

www.openwall.com/lists/oss-security/2012/11/10/2

www.openwall.com/lists/oss-security/2013/02/13/8

bugzilla.redhat.com/show_bug.cgi?id=722672

exchange.xforce.ibmcloud.com/vulnerabilities/84190

pypi.python.org/pypi/roundup/1.4.20

0.003 Low

EPSS

Percentile

65.3%

Related for OSV:PYSEC-2014-16

prion1 ubuntucve1 github1 cve1 cvelist1 nvd1 openvas1 debian1 nessus1 osv1