CVE-2019-20008
1 advisory.
PyPI/pyarchery CVE-2019-20008: unknown
In Archery before 1.3, inserting an XSS payload into a project name (either by creating a new project or editing an existing one) will result in stored XSS on the vulnerability-scan scheduling page.
Action: Upgrade pyarchery to 1.3.0 or later.
pip install pyarchery==1.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.0 | - |
Fixed versions
| 1.3.0 |
Sources
- osv: PYSEC-2019-112
- https://github.com/archerysec/archerysec/issues/338
- https://github.com/archerysec/archerysec/compare/archerysec-v1.2...v1.3
- https://github.com/archerysec/archerysec/releases/tag/v1.3
CVE-2019-20008 · published · modified · JSON