CVE-2020-28364

creationtimestamp| type| source ---|---|--- 2020-11-10 00:55:44+00:00| seen| https://t.me/cibsecurity/16054...

appian-locust (>=0.0.2 <=1.7.0), exact-sync (>=0.0.39 <=0.0.40) +2 more potentially affected by CVE-2020-28364 via locust (>=1.0.0 <=1.1.0)

locust PYPI version =1.0.0, =0.0.2, =0.0.39, =0.0.29, =0.4.0, =0.5.0 Source cves: CVE-2020-28364 Source advisory: OSV:PYSEC-2020-60...

CVE-2020-28364

CVE-2020-28364 describes a stored XSS vulnerability in Locust’s Web UI prior to version 1.3.2 when the UI is exposed to external users. The issue arises from the Web UI handling input insecurely, enabling an attacker to inject scripts via user-controlled data. Impact is limited to cases where the...

CVE-2020-28364

A stored cross-site scripting XSS vulnerability affects the Web UI in Locust before 1.3.2, if the installation violates the usage expectations by exposing this UI to outside users...