Docassemble - Local File Inclusion

Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. The vulnerability has been patched in version 1.4.97 of the mast...

EUVD-2024-0565

Malicious code in bioql PyPI...

EUVD-2024-0683

Malicious code in bioql PyPI...

VulnCheck KEV: CVE-2024-27292

Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. The vulnerability has been patched in version 1.4.97 of the...

CVE-2024-27291

Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, it is possible to create a URL that acts as an open redirect. The vulnerability has been patched in version 1.4.97 of the master branch...

CVE-2024-27290

Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, a user could type HTML into a field, including the field for the user's name, and then that HTML could be displayed on the screen as HTML. The vulnerability has been patched in version 1.4.97 of the mast...

CVE-2024-27292

Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. The vulnerability has been patched in version 1.4.97 of the mast...

Exploit for CVE-2024-27292

Docassemblepoc Docassemble任意文件读取漏洞CVE-2024-27292 python D...

Exploit for CVE-2024-27292

CVE-2024-27292 : Docassemble V1.4.96 Unauthenticated Path Trav...

Docassemble Information Disclosure Vulnerability

Docassemble is a free, open source expert system for guided interviews and document assembly. An information disclosure vulnerability exists in Docassemble versions 1.4.53 through 1.4.96, which can be exploited by an attacker to gain unauthorized access to system information by manipulating a URL...

Docassemble Open Redirect Vulnerability

Docassemble is a free, open source expert system for guided interviews and document assembly. An open redirection vulnerability exists in versions prior to Docassemble 1.4.97, which stems from the system's failure to reasonably handle target jumps, and can be exploited by an attacker to redirect ...

Docassemble Cross-Site Scripting Vulnerability

Docassemble is a free, open source expert system for guided interviews and document assembly. A cross-site scripting vulnerability exists in versions prior to Docassemble 1.4.97, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploite...

CVE-2024-27291

Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, it is possible to create a URL that acts as an open redirect. The vulnerability has been patched in version 1.4.97 of the master branch...

CVE-2024-27292

Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. The vulnerability has been patched in version 1.4.97 of the mast...

CVE-2024-27290

Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, a user could type HTML into a field, including the field for the user's name, and then that HTML could be displayed on the screen as HTML. The vulnerability has been patched in version 1.4.97 of the mast...

Docassemble 安全漏洞

Docassemble is a free, open source expert system for guided interviews and document assembly. An open redirection vulnerability exists in versions prior to Docassemble 1.4.97, which stems from the system's failure to reasonably handle target jumps, and can be exploited by an attacker to redirect ...

Docassemble 安全漏洞

Docassemble is a free, open source expert system for guided interviews and document assembly. A cross-site scripting vulnerability exists in versions prior to Docassemble 1.4.97, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploite...

Docassemble 安全漏洞

Docassemble is a free, open source expert system for guided interviews and document assembly. An information disclosure vulnerability exists in Docassemble versions 1.4.53 through 1.4.96, which can be exploited by an attacker to gain unauthorized access to system information by manipulating a URL...

Improper Access Control

docassemble.base and docassemble.webapp are vulnerable to Improper Access Control. The vulnerability is due to improper validation of user-supplied input through URL parameters. An attacker can gain unauthorized access to information on the system by manipulating URLs to bypass access controls...

docassemble-stubs (=1.4.72b1) potentially affected by CVE-2024-27292 via docassemble-base (=1.4.72)

docassemble-base PYPI version =1.4.72 is affected by a known vulnerability. The following packages have a transitive dependency on docassemble-base and may be impacted: - docassemble-stubs =1.4.72b1 Source cves: CVE-2024-27292 Source advisory: OSV:GHSA-JQ57-3W7P-VWVV...