Lucene search
+L

6 matches found

OSV
OSV
•added 2019/07/10 5:15 p.m.•26 views

CVE-2019-13122

A Cross Site Scripting XSS vulnerability exists in the template tag used to render message ids in Patchwork v1.1 through v2.1.x. This allows an attacker to insert JavaScript or HTML into the patch detail page via an email sent to a mailing list consumed by Patchwork. This affects the function msg...

6.1CVSS5.6AI score
SaveExploits0References7
NVD
NVD
•added 2019/07/10 5:15 p.m.•28 views

CVE-2019-13122

A Cross Site Scripting XSS vulnerability exists in the template tag used to render message ids in Patchwork v1.1 through v2.1.x. This allows an attacker to insert JavaScript or HTML into the patch detail page via an email sent to a mailing list consumed by Patchwork. This affects the function msg...

6.1CVSS5.9AI score0.01338EPSS
SaveExploits0References7
OSV
OSV
•added 2019/07/10 5:15 p.m.•16 views

ALPINE-CVE-2019-13122

A Cross Site Scripting XSS vulnerability exists in the template tag used to render message ids in Patchwork v1.1 through v2.1.x. This allows an attacker to insert JavaScript or HTML into the patch detail page via an email sent to a mailing list consumed by Patchwork. This affects the function msg...

6.1CVSS5.9AI score0.01338EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2019/07/10 5:15 p.m.•7 views

CVE-2019-13122

A Cross Site Scripting XSS vulnerability exists in the template tag used to render message ids in Patchwork v1.1 through v2.1.x. This allows an attacker to insert JavaScript or HTML into the patch detail page via an email sent to a mailing list consumed by Patchwork. This affects the function msg...

6.1CVSS5.4AI score0.01338EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2019/07/10 4:38 p.m.•37 views

CVE-2019-13122

A Cross Site Scripting XSS vulnerability exists in the template tag used to render message ids in Patchwork v1.1 through v2.1.x. This allows an attacker to insert JavaScript or HTML into the patch detail page via an email sent to a mailing list consumed by Patchwork. This affects the function msg...

5.9AI score0.01338EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/10 12:00 a.m.•5 views

CVE-2019-13122: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS vulnerability exists in the template tag used to render message ids in Patchwork v1.1 through v2.1.x. This allows an attacker to insert JavaScript or HTML into the patch detail page via an email sent to a mailing list consumed by Patchwork. This affects the function msg...

6.1CVSS5.8AI score0.01338EPSS
SaveExploits0References2
Rows per page
Query Builder