Lucene search
Veracode Vulnerability DatabaseVERACODE:35269HistoryApr 27, 2022 - 8:16 a.m.
Cross-Site Scripting (XSS)
2022-04-2708:16:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.004 Low
EPSS
Percentile
72.5%
roundup is vulnerable to cross-site scripting. The vulnerability exists in the clean_message function in client.py due to lack of sanitization in message parameters which allows an attacker to inject arbitrary scripts.
References
bugzilla.redhat.com/show_bug.cgi?id=722672
github.com/advisories/GHSA-5jq3-8437-x35p
github.com/roundup-tracker/roundup/commit/ebc563a2de249cc0dbda6910bf2dbca84c5fd9fa
github.com/roundup-tracker/roundup/releases/tag/1.4.20
issues.roundup-tracker.org/issue2550724
www.openwall.com/lists/oss-security/2012/11/10/2
www.openwall.com/lists/oss-security/2013/02/13/8
Related
ubuntucve
ubuntucve
CVE-2012-6133
2020-01-30 00:00:00
cve
cve
CVE-2012-6133
2020-01-30 21:15:13
osv
osv
PYSEC-2020-212
2020-01-30 21:15:00
Multiple cross-site scripting (XSS) vulnerabilities in Roundup
2022-04-23 00:40:39
roundup - security update
2015-08-23 00:00:00
prion
prion
Cross site scripting
2020-01-30 21:15:00
cvelist
cvelist
CVE-2012-6133
2020-01-30 20:22:09
nvd
nvd
CVE-2012-6133
2020-01-30 21:15:13
github
github
Multiple cross-site scripting (XSS) vulnerabilities in Roundup
2022-04-23 00:40:39
openvas
openvas
Debian: Security Advisory (DLA-298-1)
2023-03-08 00:00:00
debian
debian
[SECURITY] [DLA 298-1] roundup security update
2015-08-23 16:11:49
nessus
nessus
Debian DLA-298-1 : roundup security update
2015-08-24 00:00:00