PyPI/knowledge-repo CVE-2018-12104: medium 6.1, EPSS 1.27%

Airbnb Knowledge Repo XSS In Comments

Action: Upgrade knowledge-repo to 0.9.0 or later.

pip install knowledge-repo==0.9.0

Affected

Fixed versions

Sources

• osv: GHSA-xmw7-848p-p95w
• https://nvd.nist.gov/vuln/detail/CVE-2018-12104
• https://github.com/airbnb/knowledge-repo/issues/254
• https://github.com/airbnb/knowledge-repo/issues/431
• https://github.com/airbnb/knowledge-repo/pull/558
• https://github.com/airbnb/knowledge-repo/commit/f026ad2afea14e0ffc91f1aa0eaedcdc72c63167
• https://github.com/airbnb/knowledge-repo
• https://github.com/pypa/advisory-database/tree/main/vulns/knowledge-repo/PYSEC-2018-116.yaml
• https://pypi.org/project/knowledge-repo
• https://web.archive.org/web/20200227121013/http://www.securityfocus.com/bid/104487

CVE-2018-12104 · published 2022-05-14T03:08:16Z · modified 2024-09-27T18:24:41.834152Z · JSON