CVE-2023-36809
2 advisories.
PyPI/kiwitcms CVE-2023-36809: high 8.1
Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox
Action: Upgrade kiwitcms to 12.5 or later.
pip install kiwitcms==12.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.5 | - |
Fixed versions
| 12.5 |
Sources
- osv: GHSA-jpgw-2r9m-8qfw
- https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-jpgw-2r9m-8qfw
- https://nvd.nist.gov/vuln/detail/CVE-2023-36809
- https://github.com/kiwitcms/kiwi/commit/195ea53eaaf360c19227c864cc0fe58910032c3c
- https://github.com/kiwitcms/kiwi/commit/ffb00450be52fe11a82a2507632c2328cae4ec9d
- https://github.com/kiwitcms/Kiwi
- https://huntr.dev/bounties/511489dd-ba38-4806-9029-b28ab2830aa8
- https://huntr.dev/bounties/c6eeb346-fa99-4d41-bc40-b68f8d689223
- https://kiwitcms.org/blog/kiwi-tcms-team/2023/07/04/kiwi-tcms-125
- https://www.github.com/kiwitcms/kiwi/commit/195ea53eaaf360c19227c864cc0fe58910032c3c
- https://www.github.com/kiwitcms/kiwi/commit/ffb00450be52fe11a82a2507632c2328cae4ec9d
CVE-2023-36809 · published · modified · JSON
PyPI/kiwitcms CVE-2023-36809: high 8.1
Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox
Action: Upgrade kiwitcms to 12.5 or later.
pip install kiwitcms==12.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.5 | - |
Fixed versions
| 12.5 |
Sources
- osv: PYSEC-2026-1499
- https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-jpgw-2r9m-8qfw
- https://nvd.nist.gov/vuln/detail/CVE-2023-36809
- https://github.com/kiwitcms/kiwi/commit/195ea53eaaf360c19227c864cc0fe58910032c3c
- https://github.com/kiwitcms/kiwi/commit/ffb00450be52fe11a82a2507632c2328cae4ec9d
- https://github.com/kiwitcms/Kiwi
- https://huntr.dev/bounties/511489dd-ba38-4806-9029-b28ab2830aa8
- https://huntr.dev/bounties/c6eeb346-fa99-4d41-bc40-b68f8d689223
- https://kiwitcms.org/blog/kiwi-tcms-team/2023/07/04/kiwi-tcms-125
- https://www.github.com/kiwitcms/kiwi/commit/195ea53eaaf360c19227c864cc0fe58910032c3c
- https://www.github.com/kiwitcms/kiwi/commit/ffb00450be52fe11a82a2507632c2328cae4ec9d
- https://pypi.org/project/kiwitcms
- https://github.com/advisories/GHSA-jpgw-2r9m-8qfw
CVE-2023-36809 · published · modified · JSON