CVE-2018-9036

CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privileged users...

Cross site scripting

CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privileged users...

CVE-2018-9036

CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privileged users...

CVE-2018-9036

CVE-2018-9036 affects CheckSec Canopy 3.x before 3.0.7. The vulnerability is a stored XSS via the Login Page Disclaimer, enabling attacks by low-privileged users against higher-privileged users. The public records describe the issue and its impact, but do not provide a remediation or patch versio...

Canopy Login Page Cross-Site Scripting Vulnerability

Canopy is an integrated compilation environment IDE for the Python programming language. A cross-site scripting vulnerability exists in the Canopy login page, which allows any user with administrator privileges to inject malicious scripts to compromise any user accessing the login page...

CVE-2018-9036: Improper Neutralization of Input During Web Page Generation

CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privileged users...

PT-2018-18798

Name of the Vulnerable Software and Affected Versions CheckSec Canopy versions prior to 3.0.7 Description The issue allows for stored XSS attacks via the Login Page Disclaimer, enabling low-privileged users to target higher-privileged users. Recommendations For versions prior to 3.0.7, update to...