Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2021/06/07 9:47 p.m.48 views

Reflected cross-site scripting issue in Datasette

Impact The ?trace=1 debugging feature in Datasette does not correctly escape generated HTML, resulting in a reflected cross-site scripting vulnerability. This vulnerability is particularly relevant if your Datasette installation includes authenticated features using plugins such as...

7.2CVSS0.2AI score0.0096EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder