PyPI/kallithea CVE-2015-1864: unknown, EPSS 0.95%
Multiple cross-site scripting (XSS) vulnerabilities in the administration pages in Kallithea before 0.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) first name or (2) la
Action: Upgrade kallithea to 0.2.1 or later.
pip install kallithea==0.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.1 | - |
Fixed versions
| 0.2.1 |
Sources
- osv: PYSEC-2017-17
- https://kallithea-scm.org/security/cve-2015-1864.html
- https://kallithea-scm.org/repos/kallithea/changeset/a8f2986afc18c9221bf99f88b06e60ab83c86c55
- http://www.securityfocus.com/bid/74184
- http://www.openwall.com/lists/oss-security/2015/04/14/12
- https://github.com/advisories/GHSA-fh5c-7gmg-xmp6
CVE-2015-1864 · published · modified · JSON