PyPI/omero-web CVE-2020-7932: unknown, EPSS 0.80%
OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a session key) to be passed as URL query parameters. If an attacker tricks a user into clicking a malicious link in OMERO.web, t
Action: Upgrade omero-web to 5.6.3 or later.
pip install omero-web==5.6.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.6.3 | - |
Fixed versions
| 5.6.3 |
Sources
- osv: PYSEC-2020-244
- https://www.openmicroscopy.org/security/advisories/2019-SV4/
- https://github.com/advisories/GHSA-vwxv-frj6-fhc9
CVE-2020-7932 · published · modified · JSON