78 matches found
CVE-2019-1020005
invenio-communities before 1.0.0a20 allows XSS...
Cross site scripting
invenio-communities before 1.0.0a20 allows XSS...
PYSEC-2019-27
invenio-records before 1.2.2 allows XSS...
Cross site scripting
invenio-records before 1.2.2 allows XSS...
PYSEC-2019-25
invenio-communities before 1.0.0a20 allows XSS...
PYSEC-2019-27
invenio-records before 1.2.2 allows XSS...
PYSEC-2019-95
invenio-communities before 1.0.0a20 allows XSS...
PYSEC-2019-25
invenio-communities before 1.0.0a20 allows XSS...
PYSEC-2019-97
invenio-records before 1.2.2 allows XSS...
PYSEC-2019-94
invenio-app before 1.1.1 allows host header injection...
PYSEC-2019-24
invenio-app before 1.1.1 allows host header injection...
PYSEC-2019-24
invenio-app before 1.1.1 allows host header injection...
CVE-2019-1020019
invenio-previewer before 1.0.0a12 allows XSS...
CVE-2019-1020019
invenio-previewer before 1.0.0a12 allows XSS...
Cross site scripting
invenio-previewer before 1.0.0a12 allows XSS...
PYSEC-2019-26
invenio-previewer before 1.0.0a12 allows XSS...
PYSEC-2019-96
invenio-previewer before 1.0.0a12 allows XSS...
PYSEC-2019-26
invenio-previewer before 1.0.0a12 allows XSS...
CVE-2019-1020006
CVE-2019-1020006 affects invenio-app prior to 1.1.1 and allows host header injection due to insufficient validation of host headers via APP_ALLOWED_HOSTS. Multiple sources corroborate a host header injection risk in Invenio-App before the patched versions. The Red Hat advisory reiterates the same...