CVE-2015-5216

MEDIUM 6.1CVE-2015-5216 · Published 17/02/2020 · updated 17/06/2026

In short

CVE-2015-5216 is a MEDIUM (CVSS 6.1) vulnerability affecting ipsilon (ipsilon-project).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.0% of all vulnerabilities.
Fix: update to 1.0.1 or later.

Package	Affected versions	Patched versions
ipsilon ipsilon-project	`≥ 0.1.0, < 1.0.1`	`1.0.1`

Description

The Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly escape certain characters in a Python exception-message template, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via an HTTP response.

References

openwall.com/lists/oss-security/2015/10/27/8 · Mailing List
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
pagure.io/ipsilon/a503aa9c2a30a74e709d1c88099befd50fb2eb16 · Patch

More vulnerabilities in ipsilon

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free