{"action":"Upgrade omero-web to 5.6.3 or later.","affected":[{"fixed":"5.6.3","introduced":"0"}],"component":"omero-web","cve_ids":["CVE-2020-7932"],"ecosystem":"PyPI","epss":0.00803,"exploited":false,"fixed_versions":["5.6.3"],"ghsa_id":"GHSA-vwxv-frj6-fhc9","id":"tcs_01M5KGA0GB36BX4T8MHVB0EBPT","modified_at":"2026-06-10T17:02:25.303847201Z","published_at":"2020-06-17T17:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-244","https://www.openmicroscopy.org/security/advisories/2019-SV4/","https://github.com/advisories/GHSA-vwxv-frj6-fhc9"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-244","url":"https://osv.dev/vulnerability/PYSEC-2020-244"}],"summary":"OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a session key) to be passed as URL query parameters. If an attacker tricks a user into clicking a malicious link in OMERO.web, t"}