64 matches found
openSUSE Security Update : python-markdown2 (openSUSE-2020-651)
This update for python-markdown2 fixes the following issues : - CVE-2020-11888: Fixed unsanitized input for cross-site scripting boo1171379 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-651. The...
Security update for python-markdown2 (moderate)
openSUSE Security Update: Security update for python-markdown2 Announcement ID: openSUSE-SU-2020:0656-1 Rating: moderate References: 1171379 Cross-References: CVE-2020-11888 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This...
OPENSUSE-SU-2020:0651-1 Security update for python-markdown2
This update for python-markdown2 fixes the following issues: - CVE-2020-11888: Fixed unsanitized input for cross-site scripting boo1171379...
Security update for python-markdown2 (moderate)
openSUSE Security Update: Security update for python-markdown2 Announcement ID: openSUSE-SU-2020:0651-1 Rating: moderate References: 1171379 Cross-References: CVE-2020-11888 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...
XSS in python-markdown2
python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute...
GHSA-FV3H-8X5J-PVGQ XSS in python-markdown2
python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute...
python-markdown2 cross-site scripting vulnerability (CNVD-2020-33575)
python-markdown2 is a Python-based implementation of the Markdown text markup format. A cross-site scripting vulnerability exists in python-markdown2 version 2.3.8 and earlier. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can...
CVE-2020-11888
python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute...
CVE-2020-11888
python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute...
PYSEC-2020-65
python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute...
Cross site scripting
python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute...
PYSEC-2020-65
python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute...
CVE-2020-11888
python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute...
CVE-2020-11888
python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute...
py-markdown2 -- XSS vulnerability
TheGrandPew reports: python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute...
python-markdown2 cross-site scripting vulnerability
python-markdown is a library for python. A cross-site scripting vulnerability exists in python-markdown2 versions prior to 1.0.1.14. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-si...
CVE-2009-3724
python-markdown2 before 1.0.1.14 has multiple cross-site scripting XSS issues...
PYSEC-2020-235
python-markdown2 before 1.0.1.14 has multiple cross-site scripting XSS issues...