CVE-2018-9036

CVE-2018-9036 affects CheckSec Canopy 3.x before 3.0.7. The vulnerability is a stored XSS via the Login Page Disclaimer, enabling attacks by low-privileged users against higher-privileged users. The public records describe the issue and its impact, but do not provide a remediation or patch versio...

Canopy Login Page Cross-Site Scripting Vulnerability

Canopy is an integrated compilation environment IDE for the Python programming language. A cross-site scripting vulnerability exists in the Canopy login page, which allows any user with administrator privileges to inject malicious scripts to compromise any user accessing the login page...