4 matches found
CVE-2020-36324
Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type...
CVE-2020-36324
Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type...
CVE-2020-36324: Improper Neutralization of Input During Web Page Generation
Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type...
PT-2021-12007
Name of the Vulnerable Software and Affected Versions: analytics-quarry-web versions prior to 2020-12-15 Description: The issue allows for Reflected XSS because the application/json content type is not explicitly set in app.py. Recommendations: For versions prior to 2020-12-15, update to a versio...