| Package | Affected versions | Patched versions |
|---|---|---|
| bitcoin-abe | = 0.8≤ 0.7.2 |
Abe (aka bitcoin-abe) through 0.7.2, and 0.8pre, allows XSS in __call__ in abe.py because the PATH_INFO environment variable is mishandled during a PageNotFound exception.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free