Lucene search

K
redosRedosROS-20240902-04
HistoryAug 02, 2024 - 12:00 a.m.

ROS-20240902-04

2024-08-0200:00:00
redos.red-soft.ru
3
jinja2
xmlattr filter
vulnerability
remote attackers
xss attack
python programming language
web page structure protection

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.1

Confidence

High

A vulnerability in the xmlattr filter of the Jinja2 templating engine for the Python programming language is related to the failure to take measures to protect the structure of a web page.
to protect the structure of a web page. Exploitation of the vulnerability could allow an attacker acting
remotely to conduct a cross-site scripting (XSS) attack.

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64python3-jinja2< 3.1.3-0.1UNKNOWN

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.1

Confidence

High