CVE-2015-3162: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the edit comment dialog in bkr/server/widgets.py in Beaker 20.1 allows remote authenticated users to inject arbitrary web script or HTML via writing a crafted comment on an acked or nacked canceled job...

CVE-2015-3161: Improper Neutralization of Input During Web Page Generation

The search bar code in bkr/server/widgets.py in Beaker before 20.1 does not escape tags in string literals when producing JSON...