3 matches found
CVE-2019-11556
Pagure before 5.6 allows XSS via the templates/blame.html blame view.
CVE-2016-1000037
Pagure: XSS possible in file attachment endpoint
CVE-2017-1002151
Pagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization