Lucene search
K

6 matches found

CNVD
CNVD
added 2018/01/02 12:0 a.m.3 views

Mistune '_keyify' function cross-site scripting vulnerability

Mistune is a Python based parser with renderer functionality. A cross-site scripting vulnerability exists in the 'keyify' function of the mistune.py file in versions of Mistune prior to 0.8.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

6.1CVSS6.2AI score0.00227EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2017/12/29 3:29 p.m.17 views

CVE-2017-16876

Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...

6.1CVSS6.4AI score0.00227EPSS
Exploits0References2
OSV
OSV
added 2017/12/29 3:29 p.m.2 views

DEBIAN-CVE-2017-16876

Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...

6.1CVSS6.1AI score0.00227EPSS
Exploits0References1
PyPA
PyPA
added 2017/12/29 3:29 p.m.3 views

PYSEC-2017-18

Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...

6.1CVSS6.1AI score0.00227EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2017/12/29 3:29 p.m.1 views

UBUNTU-CVE-2017-16876

Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...

6.1CVSS6.5AI score0.00227EPSS
Exploits0References3
Cvelist
Cvelist
added 2017/12/29 3:0 p.m.18 views

CVE-2017-16876

Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...

6AI score0.00227EPSS
Exploits0References4
Rows per page
Query Builder