Lucene search
+L

75 matches found

OSV
OSV
•added 2021/11/15 11:12 p.m.•41 views

GHSA-VX6V-XG64-PMR8 Cross-site Scripting in django-helpdesk

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8.8CVSS6.1AI score0.01013EPSS
SaveExploits1References7
Veracode
Veracode
•added 2021/11/15 5:09 a.m.•20 views

Cross-Site Scripting (XSS)

django-helpdesk is vulnerable to cross-site scripting. The library does not properly sanitize input strings, allowing an attacker to inject and execute malicious javascript...

6.1CVSS3AI score0.01013EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2021/11/13 9:15 a.m.•21 views

CVE-2021-3945

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.1CVSS6.2AI score
SaveExploits0References2
NVD
NVD
•added 2021/11/13 9:15 a.m.•23 views

CVE-2021-3945

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8.8CVSS0.01013EPSS
SaveExploits1References2
OSV
OSV
•added 2021/11/13 9:15 a.m.•28 views

PYSEC-2021-430

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8.8CVSS2.1AI score0.01013EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/11/13 9:15 a.m.•19 views

CVE-2021-3945

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8.8CVSS6.8AI score0.01013EPSS
SaveExploits1References3
Prion
Prion
•added 2021/11/13 9:15 a.m.•23 views

Cross site scripting

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

4.3CVSS6.1AI score0.01013EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/11/13 9:15 a.m.•12 views

PYSEC-2021-430

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8.8CVSS6.7AI score0.01013EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2021/11/13 8:25 a.m.•2 views

CVE-2021-3945

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8.8CVSS0.01013EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2021/11/13 8:25 a.m.•33 views

CVE-2021-3945 Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8.8CVSS6.4AI score0.01013EPSS
SaveExploits1References2
CVE
CVE
•added 2021/11/13 8:25 a.m.•88 views

CVE-2021-3945

Summary: CVE-2021-3945 affects the Django-Helpdesk application, where a Cross-site Scripting vulnerability arises from improper neutralization of input during Web page generation. The issue stems from insufficient filtering/escaping of user input in django-helpdesk, enabling injection of maliciou...

8.8CVSS7.2AI score0.01013EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2021/11/13 12:00 a.m.•20 views

django-helpdesk 跨站脚本漏洞

Django-Helpdesk is a Django application. A cross-site scripting vulnerability exists in Django-Helpdesk, which stems from a lack of effective filtering and escaping of user input during Web page generation in django-helpdesk. An attacker could exploit this vulnerability to insert malicious code...

8.8CVSS5.2AI score0.01013EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/11/13 12:00 a.m.•2 views

PT-2021-22587

Name of the Vulnerable Software and Affected Versions: django-helpdesk affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for the injection of malicious scripts into web...

8.8CVSS0.01013EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/13 12:00 a.m.•5 views

CVE-2021-3945: Improper Neutralization of Input During Web Page Generation

django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

8.8CVSS5.8AI score0.01013EPSS
SaveExploits1References2
Huntr
Huntr
•added 2021/11/11 2:18 p.m.•34 views

Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk

Description Stored XSS via upload 'Attachments' with format .svg or .html Detail When opening the attachment, some format files will be rendered and loaded on the browser. So it allows executing arbitrary javascript code that was injected into attachment before. Proof of Concept // PoC.svg...

3.5CVSS0.9AI score0.00803EPSS
SaveExploits1References1
Rows per page
Query Builder