GitHub Advisoryadvisory · PyPI

GHSA-5jq3-8437-x35p Multiple cross-site scripting (XSS) vulnerabilities in Roundup

MEDIUM Published 2022-04-23 Modified 2024-10-21 Official page ↗
Aliases
CVE-2012-6133
Ecosystem
PyPI
Packages
roundup
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2022-04-26

Affected packages

• PyPI roundup: < 1.4.20 → fixed in 1.4.20

Description

Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML via the (1) @ok_message or (2) @error_message parameter to issue*.

Related

Alias · CVE (1)

  • CVE-2012-6133 Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References