CVE-2019-11556

Pagure before 5.6 allows XSS via the templates/blame.html blame view...

CVE-2019-11556

CVE-2019-11556 affects Pagure prior to 5.6, enabling a cross-site scripting (XSS) flaw in the templates/blame.html blame view. Public advisories (openSUSE/Mageia) confirm patches in Pagure updates (openSUSE-2020-1765, MGASA-2021-0206) that fix the XSS vulnerability. CVSS metrics: CVSS v2 base 4.3...