Pagure before 5.6 allows XSS via the templates/blame.html blame view.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade pagure-theme-chameleonUpgrade pagure-theme-upstreamUpgrade pagure-ciUpgrade pagure-theme-default-upstreamUpgrade pagure-theme-pagureioUpgrade pagure-evUpgrade pagure-loadjsonUpgrade pagure-theme-srcfpoUpgrade pagure-mirrorUpgrade pagure-miltersUpgrade pagure-logcomUpgrade pagureUpgrade pagure-theme-default-openSUSEUpgrade pagure-webhook | Apr 27, 2021 | Sep 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub