~ / search / GHSA-g5j6-r3x9-gf2m

GHSA-g5j6-r3x9-gf2m

Cross-site scripting in Contentful

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-13258

Packages

EcosystemPackageAffectedFixed in
PyPI contentful < 1.12.4 1.12.4

Details

As written in the advisory (Markdown source, shown as plain text).

Contentful through 2020-05-21 for Python allows reflected XSS, as demonstrated by the api parameter to the-example-app.py.

References

External links from the advisory. They lead to third-party sites.