CVE-2019-25095
2 advisories.
PyPI/ldapcherry CVE-2019-25095: medium 6.1
LdapCherry Cross-site Scripting vulnerbaility
Action: Upgrade ldapcherry to 1.0.0 or later.
pip install ldapcherry==1.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0 | - |
Fixed versions
| 1.0.0 |
Sources
- osv: GHSA-vq8w-x8v7-f88m
- https://nvd.nist.gov/vuln/detail/CVE-2019-25095
- https://github.com/kakwa/ldapcherry/pull/16
- https://github.com/kakwa/ldapcherry/commit/6f98076281e9452fdb1adcd1bcbb70a6f968ade9
- https://github.com/kakwa/ldapcherry
- https://github.com/kakwa/ldapcherry/releases/tag/1.0.0
- https://github.com/pypa/advisory-database/tree/main/vulns/ldapcherry/PYSEC-2023-19.yaml
- https://vuldb.com/?ctiid.217434
- https://vuldb.com/?id.217434
CVE-2019-25095 · published · modified · JSON
PyPI/ldapcherry CVE-2019-25095: unknown
A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to 0.x. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site script
Action: Upgrade ldapcherry to 1.0.0 or later.
pip install ldapcherry==1.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0 | - |
Fixed versions
| 1.0.0 |
Sources
- osv: PYSEC-2023-19
- https://github.com/kakwa/ldapcherry/pull/16
- https://vuldb.com/?ctiid.217434
- https://github.com/kakwa/ldapcherry/commit/6f98076281e9452fdb1adcd1bcbb70a6f968ade9
- https://github.com/kakwa/ldapcherry/releases/tag/1.0.0
- https://vuldb.com/?id.217434
- https://github.com/advisories/GHSA-vq8w-x8v7-f88m
CVE-2019-25095 · published · modified · JSON