Cross-Site Scripting (XSS)

2020-08-0400:48:31

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.005 Low

EPSS

Percentile

76.3%

JSON

restws is vulnerable to cross-site scripting. A remotely authenticated user is able inject and execute arbitary Javascript in another user’s browser.

CPENameOperatorVersion
python-requestseq1.1.0__3.1.1.el6
python-requestseq1.1.0__8.1.el7ost
python-requestseq1.1.0__8.1.el6
python-requestseq1.1.0__3.el6ost
oautheq20100601__3.el6
ruby193-rubygem-ancestryeq1.3.0__4.el6ost
ruby193-rubygem-ancestryeq1.3.0__5.el6ost
ruby193-rubygem-ancestryeq1.2.5__1.el6cf
ruby193-rubygem-bundler_exteq0.3.0__5.el6ost
ruby193-rubygem-bundler_exteq0.3.0__5.el6_4

Name	Operator	Version
python-requests	eq	1.1.0__3.1.1.el6
python-requests	eq	1.1.0__8.1.el7ost
python-requests	eq	1.1.0__8.1.el6
python-requests	eq	1.1.0__3.el6ost
oauth	eq	20100601__3.el6
ruby193-rubygem-ancestry	eq	1.3.0__4.el6ost
ruby193-rubygem-ancestry	eq	1.3.0__5.el6ost
ruby193-rubygem-ancestry	eq	1.2.5__1.el6cf
ruby193-rubygem-bundler_ext	eq	0.3.0__5.el6ost
ruby193-rubygem-bundler_ext	eq	0.3.0__5.el6_4