Fedora Update for loggerhead FEDORA-2011-4107

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for loggerhead FEDORA-2011-4085

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 13 : loggerhead-1.18.1-1.fc13 (2011-4107)

New upstream release to fix CVE-2011-0728 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 15 : loggerhead-1.18.1-1.fc15 (2011-4050)

New upstream release to fix CVE-2011-0728 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 14 : loggerhead-1.18.1-1.fc14 (2011-4085)

New upstream release to fix CVE-2011-0728 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2011-0728

CVE-2011-0728 is a cross-site scripting (XSS) vulnerability in Loggerhead’s Python component; the issue affects the templatefunctions.py file and allows remote authenticated users to inject script/HTML via a filename in the revision view. Connected advisories (GHSA and OSV) reiterate the same, na...

CVE-2011-0728

Cross-site scripting XSS vulnerability in templatefunctions.py in Loggerhead before 1.18.1 allows remote authenticated users to inject arbitrary web script or HTML via a filename, which is not properly handled in a revision view...