Описание
Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgi_handler.py mishandle 404 errors.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| roundup | removed | package |
Примечания
https://github.com/python/bugs.python.org/issues/34
https://issues.roundup-tracker.org/issue2551035
https://bitbucket.org/python/roundup/commits/51682dc2cd7e28421d749117c25bec58f632ee5f
Связанные уязвимости
CVSS3: 6.1
ubuntu
почти 7 лет назад
Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgi_handler.py mishandle 404 errors.
CVSS3: 6.1
nvd
почти 7 лет назад
Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgi_handler.py mishandle 404 errors.
CVSS3: 6.1
github
почти 7 лет назад
Moderate severity vulnerability that affects roundup