CVE-2020-26249
2 advisories.
PyPI/red-dashboard CVE-2020-26249: high 7.7, EPSS 1.30%
Remote Code Execution (RCE) Exploit on Cross Site Scripting (XSS) Vulnerability
Action: Upgrade red-dashboard to 0.1.7a or later.
pip install red-dashboard==0.1.7aAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.7a | - |
Fixed versions
| 0.1.7a |
Sources
- osv: GHSA-hm45-mgqm-gjm4
- https://github.com/Cog-Creators/Red-Dashboard/security/advisories/GHSA-hm45-mgqm-gjm4
- https://nvd.nist.gov/vuln/detail/CVE-2020-26249
- https://github.com/Cog-Creators/Red-Dashboard/commit/99d88b840674674166ce005b784ae8e31e955ab1
- https://github.com/Cog-Creators/Red-Dashboard/commit/a6b9785338003ec87fb75305e7d1cc2d40c7ab91
- https://github.com/Cog-Creators/Red-Dashboard
- https://github.com/pypa/advisory-database/tree/main/vulns/red-dashboard/PYSEC-2020-98.yaml
- https://pypi.org/project/Red-Dashboard
CVE-2020-26249 · published · modified · JSON
PyPI/red-dashboard CVE-2020-26249: unknown, EPSS 1.30%
Red Discord Bot Dashboard is an easy-to-use interactive web dashboard to control your Redbot. In Red Discord Bot before version 0.1.7a an RCE exploit has been discovered. This exploit allows Discord u
Action: Upgrade red-dashboard to 0.1.7a or later.
pip install red-dashboard==0.1.7aAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.7a | - |
Fixed versions
| 0.1.7a |
Sources
- osv: PYSEC-2020-98
- https://github.com/Cog-Creators/Red-Dashboard/commit/a6b9785338003ec87fb75305e7d1cc2d40c7ab91
- https://github.com/Cog-Creators/Red-Dashboard/security/advisories/GHSA-hm45-mgqm-gjm4
- https://pypi.org/project/Red-Dashboard
- https://github.com/Cog-Creators/Red-Dashboard/commit/99d88b840674674166ce005b784ae8e31e955ab1
CVE-2020-26249 · published · modified · JSON