CVE-2020-7932
2 advisories.
PyPI/omero-web CVE-2020-7932: medium 5.7
OMERO-web Sensitive Data Exposure
Action: Upgrade omero-web to 5.6.3 or later.
pip install omero-web==5.6.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.6.3 | - |
Fixed versions
| 5.6.3 |
Sources
- osv: GHSA-vwxv-frj6-fhc9
- https://nvd.nist.gov/vuln/detail/CVE-2020-7932
- https://github.com/ome/omero-web
- https://github.com/pypa/advisory-database/tree/main/vulns/omero-web/PYSEC-2020-244.yaml
- https://www.openmicroscopy.org/security/advisories/2019-SV4
CVE-2020-7932 · published · modified · JSON
PyPI/omero-web CVE-2020-7932: unknown
OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a session key) to be passed as URL query parameters. If an attacker tricks a user into clicking a malicious link in OMERO.web, t
Action: Upgrade omero-web to 5.6.3 or later.
pip install omero-web==5.6.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.6.3 | - |
Fixed versions
| 5.6.3 |
Sources
- osv: PYSEC-2020-244
- https://www.openmicroscopy.org/security/advisories/2019-SV4/
- https://github.com/advisories/GHSA-vwxv-frj6-fhc9
CVE-2020-7932 · published · modified · JSON