Lucene search
+L

3 matches found

osv_ghsa
osv_ghsa
•added 2022/05/14 3:46 a.m.•101 views

GHSA-H2FP-XGX6-XH6F Pallets Werkzeug cross-site scripting vulnerability

Cross-site scripting XSS vulnerability in the renderfull function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 as used in Pallets Flask and other products allows remote attackers to inject arbitrary web script or HTML via a field that contains an exception message...

6.1CVSS7AI score0.01985EPSS
SaveExploits0References8
Rows per page
Query Builder