Lucene search
+L

7 matches found

osv_cve
osv_cve
•added 2019/07/10 5:15 p.m.•32 views

CVE-2019-13122

A Cross Site Scripting XSS vulnerability exists in the template tag used to render message ids in Patchwork v1.1 through v2.1.x. This allows an attacker to insert JavaScript or HTML into the patch detail page via an email sent to a mailing list consumed by Patchwork. This affects the function msg...

6.1CVSS5.6AI score
SaveExploits0References7
NVD
NVD
•added 2019/07/10 5:15 p.m.•34 views

CVE-2019-13122

A Cross Site Scripting XSS vulnerability exists in the template tag used to render message ids in Patchwork v1.1 through v2.1.x. This allows an attacker to insert JavaScript or HTML into the patch detail page via an email sent to a mailing list consumed by Patchwork. This affects the function msg...

6.1CVSS5.9AI score0.01338EPSS
SaveExploits0References7
osv_alpine
osv_alpine
•added 2019/07/10 5:15 p.m.•27 views

ALPINE-CVE-2019-13122

A Cross Site Scripting XSS vulnerability exists in the template tag used to render message ids in Patchwork v1.1 through v2.1.x. This allows an attacker to insert JavaScript or HTML into the patch detail page via an email sent to a mailing list consumed by Patchwork. This affects the function msg...

6.1CVSS5.9AI score0.01338EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2019/07/10 5:15 p.m.•9 views

CVE-2019-13122

A Cross Site Scripting XSS vulnerability exists in the template tag used to render message ids in Patchwork v1.1 through v2.1.x. This allows an attacker to insert JavaScript or HTML into the patch detail page via an email sent to a mailing list consumed by Patchwork. This affects the function msg...

6.1CVSS5.4AI score0.01338EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2019/07/10 4:38 p.m.•42 views

CVE-2019-13122

A Cross Site Scripting XSS vulnerability exists in the template tag used to render message ids in Patchwork v1.1 through v2.1.x. This allows an attacker to insert JavaScript or HTML into the patch detail page via an email sent to a mailing list consumed by Patchwork. This affects the function msg...

5.9AI score0.01338EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2019/07/10 12:00 a.m.•9 views

PT-2019-13137

Name of the Vulnerable Software and Affected Versions Patchwork versions 1.1 through 2.1.x Description A Cross Site Scripting XSS issue exists in the template tag used to render message ids. This allows an attacker to insert JavaScript or HTML into the patch detail page via an email sent to a...

6.1CVSS0.01338EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/10 12:00 a.m.•9 views

CVE-2019-13122: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS vulnerability exists in the template tag used to render message ids in Patchwork v1.1 through v2.1.x. This allows an attacker to insert JavaScript or HTML into the patch detail page via an email sent to a mailing list consumed by Patchwork. This affects the function msg...

6.1CVSS5.8AI score0.01338EPSS
SaveExploits0References2
Rows per page
Query Builder