489 matches found
PYSEC-2017-18
Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...
PYSEC-2017-18
Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...
UBUNTU-CVE-2017-16876
Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...
CVE-2017-16876
Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...
DEBIAN-CVE-2017-16876
Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...
CVE-2017-16876
Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...
CVE-2017-16876
CVE-2017-16876 is a cross-site scripting (XSS) vulnerability in Mistune’s _keyify function in mistune.py, present in Mistune versions before 0.8.1. The issue arises from failure to escape the key argument, enabling remote script or HTML injection. Public details in the connected documents specify...
CVE-2017-16876
Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...
CVE-2017-16876
Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...
PT-2017-14611
Name of the Vulnerable Software and Affected Versions Mistune versions prior to 0.8.1 Description The issue concerns a Cross-Site Scripting XSS vulnerability in the keyify function. This vulnerability allows remote attackers to inject arbitrary web scripts or HTML by exploiting the failure to...
Fedora Update for python-mistune FEDORA-2017-7b4149911a
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-16876: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...
Fedora 26 : python-mistune (2017-7b4149911a)
Update to 0.8.3, fixing CVE-2017-15612 and CVE-2017-16876 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
[SECURITY] Fedora 26 Update: python-mistune-0.8.3-1.fc26
The fastest markdown parser in pure Python, inspired by marked...
Cross-site Scripting (XSS)
mistune is vulnerable to cross-site scripting XSS attacks. The keyify method doesn't escape the key values which allows attackers to insert and execute arbitrary webscript...
Mistune Cross-Site Scripting Vulnerability
Mistune is a Python based parser with renderer functionality. A cross-site scripting vulnerability exists in the mistune.py file in Mistune version 0.7.4. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
Cross-site Scripting (XSS)
mistune is vulnerable to cross-site scripting XSS attacks. These attacks can be conducted by inserting an unexpected newline or by using an email address to execute arbitrary Javascript...
PYSEC-2017-80
mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline such as in java\nscript: or a crafted email address, related to the escape and autolink functions...