PT-2023-10329 · Unknown · Django-Ucamlookup

CVE-2016-15010

·

Publicado

2023-01-05

·

Atualizado

2024-08-06

CVSS v3.1

6.1

Média

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions django-ucamlookup versions up to 1.9.1
Description A vulnerability was found in the Lookup Handler component of django-ucamlookup, leading to cross-site scripting. The attack can be launched remotely. This issue affects products that are no longer supported by the maintainer.
Recommendations Upgrading to version 1.9.2 is able to address this issue. It is recommended to upgrade the affected component.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2016-15010
GHSA-PJX4-3F3P-29V3
PYSEC-2023-14

Produtos afetados

Django-Ucamlookup