~ / search / GHSA-7gfc-2v6g-6w9f

GHSA-7gfc-2v6g-6w9f

Paste is vulnerable to Cross-site Scripting via vectors involving a 404 status code

Source: GitHub Advisory Database (reviewed) Moderate CVE-2010-2477

Packages

EcosystemPackageAffectedFixed in
PyPI paste < 1.7.4 1.7.4

Details

As written in the advisory (Markdown source, shown as plain text).

Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to (1) paste.urlparser.StaticURLParser, (2) paste.urlparser.PkgResourcesParser, (3) paste.urlmap.URLMap, and (4) HTTPNotFound.

References

External links from the advisory. They lead to third-party sites.