68 matches found
CVE-2020-15855
Two cross-site scripting vulnerabilities were fixed in Bodhi 5.6.1...
CVE-2020-15855
Two cross-site scripting vulnerabilities were fixed in Bodhi 5.6.1...
Cross site scripting
Two cross-site scripting vulnerabilities were fixed in Bodhi 5.6.1...
CVE-2020-15855
Two cross-site scripting vulnerabilities were fixed in Bodhi 5.6.1...
Bodhi 跨站脚本漏洞
Bodhi is a web-based system used to manage the software update release process for Fedora. A security vulnerability exists in Bodhi version 5.6.1, which can be exploited by an attacker to perform cross-site scripting attacks...
PT-2022-8579 · Bodhi · Bodhi
Name of the Vulnerable Software and Affected Versions: Bodhi versions prior to 5.6.1 Description: Two cross-site scripting issues were fixed. Recommendations: For versions prior to 5.6.1, update to version 5.6.1 to resolve the issue...
CVE-2020-15855
Two cross-site scripting vulnerabilities were fixed in Bodhi 5.6.1. Public documents attribute the issues to Bodhi’s web UI components, specifically inputs in pages such as overrides.html and updates.html, leading to XSS when user-supplied data is not safely handled. Remediation: upgrade to Bodhi...
GHSA-H896-6HCP-GJ6C Bodhi Cross-site Scripting Vulnerability
Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles...
Bodhi Cross-site Scripting Vulnerability
Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles...
Fedora 33 : libpano13 (2021-67cbea4608)
The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-67cbea4608 advisory. - Format string vulnerability in panoFileOutputNamesCreate in libpano13 2.9.20rc2+dfsg-3 and earlier can lead to read and write arbitrary memory...
bodhi-yoga.at Cross Site Scripting vulnerability OBB-1219299
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
bodhi-yoga.eu Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1166054 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Cross-Site Scripting (XSS)
bodhi-server is vulnerable to cross-site scripting XSS. A remote attacker with create/edit updates privileges is able to inject arbitrary Javascript into a victim's browser via multiple parameters in the templates such as the beautifytitle, displayname and requirements...
PYSEC-2019-150
Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles...
PYSEC-2019-150
Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles...
CVE-2017-1002152
Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles...
Cross site scripting
Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles...
CVE-2017-1002152
Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles...
CVE-2017-1002152
Bodhi 2.9.0 and lower are affected by CVE-2017-1002152 due to incorrect validation of bug titles, causing cross-site scripting and potential code injection. The issue is documented across multiple sources (OSV, GHSA, Fedora advisories) with the remediation to upgrade to Bodhi 2.9.1. No exploitati...