CVE-2020-36324

Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type...

CVE-2020-36324

Wikimedia Quarry analytics-quarry-web (affected component: app.py) is vulnerable to Reflected XSS due to not explicitly setting the application/json content type. This CVE (CVE-2020-36324) is described across multiple sources as enabling reflected XSS before 2020-12-15. The core detail shown in t...