CVE Browser

Page 1

Permissions not properly checked in Invenio-Drafts-Resources

invenio-app before 1.1.1 allows host header injection.

invenio-communities before 1.0.0a20 allows XSS.

invenio-records before 1.2.2 allows XSS.

invenio-previewer before 1.0.0a12 allows XSS.

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2021-43781	Permissions not properly checked in Invenio-Drafts-Resources	MEDIUM	5.1	0.68%	Dec 6, 2021
CVE-2019-1020006	invenio-app before 1.1.1 allows host header injection.	MEDIUM	5.3	0.93%	Jul 29, 2019
CVE-2019-1020005	invenio-communities before 1.0.0a20 allows XSS.	MEDIUM	5.1	0.68%	Jul 29, 2019
CVE-2019-1020003	invenio-records before 1.2.2 allows XSS.	MEDIUM	5.1	0.66%	Jul 29, 2019
CVE-2019-1020019	invenio-previewer before 1.0.0a12 allows XSS.	MEDIUM	5.3	0.90%	Jul 29, 2019

Rows per page

Showing 1 to 5 CVEs · page 1