EUVD-2019-0062

Malware in sbrugna...

CVE-2019-1020005

invenio-communities before 1.0.0a20 allows XSS...

Invenio-Communities has a Cross-Site Scripting (XSS) vulnerability in React components

Impact We have identified a Cross-Site Scripting XSS vulnerability within certain React components related to community members in the Invenio-Communities module. This vulnerability enables a user to inject a script tag into the Affiliations field during the account registration process. The...

GHSA-HJX6-F647-MVF9 Invenio-Communities has a Cross-Site Scripting (XSS) vulnerability in React components

Impact We have identified a Cross-Site Scripting XSS vulnerability within certain React components related to community members in the Invenio-Communities module. This vulnerability enables a user to inject a script tag into the Affiliations field during the account registration process. The...

invenio-app-rdm (>=10.0.0.dev15, <=11.0.0.dev1), invenio-theme-tugraz (4.11.0) +4 more potentially affected by unknown CVE via invenio-communities (>=3.2.2, <=4.2.1)

invenio-communities PYPI version =3.2.2, =10.0.0.dev15, =1.0.40, =11.0.3, =4.0.2, =4.0.22, =4.0.42 Source cves: unknown CVE Source advisory: OSV:GHSA-HJX6-F647-MVF9...

invenio-app-rdm (>=10.0.0.dev15, <=11.0.0.dev1), invenio-theme-tugraz (4.11.0) +4 more potentially affected by unknown CVE via invenio-communities (>=3.2.2, <=4.2.1)

invenio-communities PYPI version =3.2.2, =10.0.0.dev15, =1.0.40, =11.0.3, =4.0.2, =4.0.22, =4.0.42 Source cves: unknown CVE Source advisory: GHSA-HJX6-F647-MVF9...

invenio-app-rdm (>=12.0.0.dev0, <=12.0.0b2.dev0), invenio-dnb-urn (0.2.2) +2 more potentially affected by unknown CVE via invenio-communities (>=5.1.0, <=7.7.3)

invenio-communities PYPI version =5.1.0, =12.0.0.dev0, =4.10.0, =11.0.17, =12.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-HJX6-F647-MVF9...

invenio-app-rdm (>=12.0.0.dev0, <=12.0.0b2.dev0), invenio-dnb-urn (0.2.2) +2 more potentially affected by unknown CVE via invenio-communities (>=5.1.0, <=7.7.3)

invenio-communities PYPI version =5.1.0, =12.0.0.dev0, =4.10.0, =11.0.17, =12.0.3 Source cves: unknown CVE Source advisory: GHSA-HJX6-F647-MVF9...

PT-2024-40325

Name of the Vulnerable Software and Affected Versions Invenio-Communities versions prior to 2.8.11 Invenio-Communities versions prior to 4.2.2 Invenio-Communities versions prior to 7.8.0 Description A Cross-Site Scripting XSS issue has been identified in certain React components related to...

Cross-site Scripting (XSS)

invenio-communities is vulnerable to cross-site scripting XSS. The vulnerability exists through the lack of sanitization of community.description in about.html...

CVE-2019-1020005

invenio-communities before 1.0.0a20 allows XSS...

CVE-2019-1020005

invenio-communities before 1.0.0a20 allows XSS...

Cross site scripting

invenio-communities before 1.0.0a20 allows XSS...

PYSEC-2019-25

invenio-communities before 1.0.0a20 allows XSS...

PYSEC-2019-95

invenio-communities before 1.0.0a20 allows XSS...

PYSEC-2019-25

invenio-communities before 1.0.0a20 allows XSS...

CVE-2019-1020005

CVE-2019-1020005 affects invenio-communities up to version 1.0.0a20, where two Jinja templates in the module allow cross-site scripting due to lack of input sanitization in community description and pages. The issue enables an attacker to inject scripts when creating a new community or editing fi...

CVE-2019-1020005

invenio-communities before 1.0.0a20 allows XSS...

CVE-2019-1020005

invenio-communities before 1.0.0a20 allows XSS...

PT-2019-20176

Name of the Vulnerable Software and Affected Versions invenio-communities versions prior to 1.0.0a20 Description The issue allows for cross-site scripting XSS, which is a type of attack where an attacker can inject malicious scripts into a website. Recommendations For versions prior to 1.0.0a20,...