3 matches found
Improper Validation of Specified Type of Input
Overview python-ldap is a Python modules for implementing LDAP clients Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via the escapefilterchars function. An attacker can bypass input sanitization and potentially manipulate or disclose LDAP data ...
6.9CVSS6.9AI score0.00301EPSS
SaveExploits1References2
EUVD-2021-0786
Malware in sbrugna...
6.1CVSS6.5AI score0.01376EPSS
SaveExploits0References9
CVE-2020-25739
An issue was discovered in the gon gem before gon-6.4.0 for Ruby. MultiJson does not honor the escapemode parameter to escape fields as an XSS protection mechanism. To mitigate, jsondumper.rb in gon now does escaping for XSS by default without relying on MultiJson...
6.1CVSS5.8AI score
SaveExploits0References3
20