GHSA-mqwh-r366-4224
Cabot Cross Site Scripting (XSS) vulnerability via Endpoint column
Packages
Details
As written in the advisory (Markdown source, shown as plain text).
All versions up to 0.11.16 of package cabot are vulnerable to Cross-site Scripting (XSS) via the Endpoint column.
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2020-7734
- https://github.com/arachnys/cabot/pull/694
- https://github.com/arachnys/cabot/commit/eb0b3544f8c8ab2dee4643df191da346a941734f
- https://github.com/arachnys/cabot
- https://github.com/pypa/advisory-database/tree/main/vulns/cabot/PYSEC-2020-227.yaml
- https://itsmeanonartist.tech/blogs/blog2.html
- https://snyk.io/vuln/SNYK-PYTHON-CABOT-609862
- https://www.exploit-db.com/exploits/48791