Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2010-2477

python-paste: multiple XSS vulnerabilities

Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to (1) paste.urlparser.StaticURLParser, (2) paste.urlparser.PkgResourcesParser, (3) paste.urlmap.URLMap, and (4) HTTPNotFound.

CVSS 2.0 · 4.3 Medium EPSS 2.3% KEV · Not listed
Vendors
Pythonpaste
Products
Paste
CVE-2012-0878

python-paste-script: Supplementary groups not dropped when started an application with "paster serve" as root

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem.

CVSS 2.0 · 5.1 Medium EPSS 4.0% KEV · Not listed
Vendors
Pythonpaste Redhat
Products
Paste Enterprise Linux