CVE-2023-30628
1 advisory.
PyPI/kiwitcms CVE-2023-30628: high 8.8, EPSS 3.60%
Kiwi TCMS is an open source test management system. In kiwitcms/Kiwi v12.2 and prior and kiwitcms/enterprise v12.2 and prior,
Action: Upgrade kiwitcms to 12.3 or later.
pip install kiwitcms==12.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.3 | - |
Fixed versions
| 12.3 |
Sources
- osv: PYSEC-2023-273
- https://github.com/kiwitcms/enterprise/commit/e39f7e156fdaf6fec09a15ea6f4e8fec8cdbf751
- https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-cw6r-6ccx-5hwx
- https://github.com/kiwitcms/Kiwi/commit/834c86dfd1b2492ccad7ebbfd6304bfec895fed2
- https://github.com/kiwitcms/Kiwi/blob/37bfb87696093ce0393160e2725949185cc0651d/.github/workflows/changelog.yml#L18
- https://securitylab.github.com/research/github-actions-untrusted-input/
CVE-2023-30628 · published · modified · JSON