24 matches found
EUVD-2019-0062
Malware in sbrugna...
CVE-2019-1020005
invenio-communities before 1.0.0a20 allows XSS...
Invenio-Communities has a Cross-Site Scripting (XSS) vulnerability in React components
Impact We have identified a Cross-Site Scripting XSS vulnerability within certain React components related to community members in the Invenio-Communities module. This vulnerability enables a user to inject a script tag into the Affiliations field during the account registration process. The...
GHSA-HJX6-F647-MVF9 Invenio-Communities has a Cross-Site Scripting (XSS) vulnerability in React components
Impact We have identified a Cross-Site Scripting XSS vulnerability within certain React components related to community members in the Invenio-Communities module. This vulnerability enables a user to inject a script tag into the Affiliations field during the account registration process. The...
invenio-app-rdm (>=10.0.0.dev15, <=11.0.0.dev1), invenio-theme-tugraz (4.11.0) +4 more potentially affected by unknown CVE via invenio-communities (>=3.2.2, <=4.2.1)
invenio-communities PYPI version =3.2.2, =10.0.0.dev15, =1.0.40, =11.0.3, =4.0.2, =4.0.22, =4.0.42 Source cves: unknown CVE Source advisory: OSV:GHSA-HJX6-F647-MVF9...
invenio-app-rdm (>=10.0.0.dev15, <=11.0.0.dev1), invenio-theme-tugraz (4.11.0) +4 more potentially affected by unknown CVE via invenio-communities (>=3.2.2, <=4.2.1)
invenio-communities PYPI version =3.2.2, =10.0.0.dev15, =1.0.40, =11.0.3, =4.0.2, =4.0.22, =4.0.42 Source cves: unknown CVE Source advisory: GHSA-HJX6-F647-MVF9...
invenio-app-rdm (>=12.0.0.dev0, <=12.0.0b2.dev0), invenio-dnb-urn (0.2.2) +2 more potentially affected by unknown CVE via invenio-communities (>=5.1.0, <=7.7.3)
invenio-communities PYPI version =5.1.0, =12.0.0.dev0, =4.10.0, =11.0.17, =12.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-HJX6-F647-MVF9...
invenio-app-rdm (>=12.0.0.dev0, <=12.0.0b2.dev0), invenio-dnb-urn (0.2.2) +2 more potentially affected by unknown CVE via invenio-communities (>=5.1.0, <=7.7.3)
invenio-communities PYPI version =5.1.0, =12.0.0.dev0, =4.10.0, =11.0.17, =12.0.3 Source cves: unknown CVE Source advisory: GHSA-HJX6-F647-MVF9...
PT-2024-40325
Name of the Vulnerable Software and Affected Versions Invenio-Communities versions prior to 2.8.11 Invenio-Communities versions prior to 4.2.2 Invenio-Communities versions prior to 7.8.0 Description A Cross-Site Scripting XSS issue has been identified in certain React components related to...
Cross-site Scripting (XSS)
invenio-communities is vulnerable to cross-site scripting XSS. The vulnerability exists through the lack of sanitization of community.description in about.html...
CVE-2019-1020005
invenio-communities before 1.0.0a20 allows XSS...
CVE-2019-1020005
invenio-communities before 1.0.0a20 allows XSS...
Cross site scripting
invenio-communities before 1.0.0a20 allows XSS...
PYSEC-2019-25
invenio-communities before 1.0.0a20 allows XSS...
PYSEC-2019-95
invenio-communities before 1.0.0a20 allows XSS...
PYSEC-2019-25
invenio-communities before 1.0.0a20 allows XSS...
CVE-2019-1020005
CVE-2019-1020005 affects invenio-communities up to version 1.0.0a20, where two Jinja templates in the module allow cross-site scripting due to lack of input sanitization in community description and pages. The issue enables an attacker to inject scripts when creating a new community or editing fi...
CVE-2019-1020005
invenio-communities before 1.0.0a20 allows XSS...
