CVE-2022-32159

In openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 are vulnerable to Stored XSS...

CVE-2022-23081

In openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 are vulnerable to Reflected XSS...

Cross site scripting

In openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 are vulnerable to Stored XSS...

Cross site scripting

In openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 are vulnerable to Reflected XSS...

CVE-2022-32159 Openlibrary - Stored XSS

In openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 are vulnerable to Stored XSS...

CVE-2022-32159

CVE-2022-32159 affects openlibrary versions deploy-2016-07-0 through deploy-2021-12-22, where a Stored XSS vulnerability exists in OpenLibrary’s web frontend. The vulnerability is described as a stored cross-site scripting issue that could be triggered via input handling in the affected releases....

CVE-2022-32159

In openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 are vulnerable to Stored XSS...

CVE-2022-32159 Openlibrary - Stored XSS

In openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 are vulnerable to Stored XSS...

CVE-2022-23081 Openlibrary - Reflected XSS

In openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 are vulnerable to Reflected XSS...

CVE-2022-23081

Openlibrary is affected by CVE-2022-23081 due to a Reflected XSS in the web frontend for deployments deploy-2016-07-0 through deploy-2021-12-22. The root cause is lack of proper filtering/verification of user-supplied data and output in the administrator login URL, enabling an attacker to cause c...

CVE-2022-23081

In openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 are vulnerable to Reflected XSS...

CVE-2022-23081 Openlibrary - Reflected XSS

In openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 are vulnerable to Reflected XSS...

CVE-2022-23081: Improper Neutralization of Input During Web Page Generation

In openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 are vulnerable to Reflected XSS...

CVE-2022-32159: Improper Neutralization of Input During Web Page Generation

In openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 are vulnerable to Stored XSS...

OpenLibrary cross-site scripting vulnerability

openlibrary is an open, editable library catalog. openlibrary deploy-2016-07-0 version to deploy-2021-12-22 version is vulnerable to a cross-site scripting vulnerability. An attacker could exploit this vulnerability to perform a stored cross-site scripting attack...

PT-2022-15837 · Unknown · Openlibrary

Name of the Vulnerable Software and Affected Versions: openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 Description: The issue is related to Reflected XSS. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where...

PT-2022-21126

Name of the Vulnerable Software and Affected Versions openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 Description The issue is related to Stored XSS. Recommendations For openlibrary versions deploy-2016-07-0 through deploy-2021-12-22, at the moment, there is no information about a...

OpenLibrary cross-site scripting vulnerability

openlibrary is an open, editable library catalog. A cross-site scripting vulnerability exists in openlibrary deploy-2016-07-0 version to deploy-2021-12-22 version, which stems from the lack of checksum filtering of user-supplied data and output from the administrator user login application URL. A...

openlibrary-client (0.0.18) potentially affected by CVE-2020-25659 via cryptography (2.2.0)

cryptography PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - openlibrary-client 0.0.18 Source cves: CVE-2020-25659 Source advisory: OSV:PYSEC-2021-62...

asgi-amqp (>=0.2.0, <=0.3.1), cloudshell-cp-aws (>=3.1.12, <=3.3.10) +5 more potentially affected by CVE-2020-22083 via jsonpickle (0.9.3)

jsonpickle PYPI version 0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on jsonpickle and may be impacted: - asgi-amqp =0.2.0, =3.1.12, =2.0.0, =0.0.18, =0.0.30 - openlibrary-client-mek 0.0.30 - playback-studio 0.3.29 Source cves: CVE-2020-22083...