CVE-2016-1000007

Pagure 2.2.1 XSS in raw file endpoint...

CVE-2016-1000007

Pagure 2.2.1 XSS in raw file endpoint...

CVE-2016-1000007

The connected records confirm a concrete vulnerability: Pagure 2.2.1 contains a Cross-Site Scripting (XSS) flaw specifically in the raw file endpoint. The NVD entry CVE-2016-1000007 documents this XSS issue, and CNVD also references Pagure 2.2.1 XSS in the same context. Public references in these...

PT-2016-4492

Name of the Vulnerable Software and Affected Versions Pagure version 2.2.1 Description The issue concerns an XSS in the raw file endpoint. Recommendations For Pagure version 2.2.1, update to a newer version that contains a fix for this issue...

File Containment Vulnerability in Hangzhou Ancai Network Reimbursement System (CNVD-2017-02374)

Hangzhou Ancai Network Reimbursement System is an online reimbursement system that supports online bill of lading and online approval for employees, bidding farewell to paper transmission and improving the timeliness, safety and standardization of information transmission. A file inclusion...