En bref
- CVE-2024-9427 est une vulnérabilité MOYENNE (CVSS 5.4) touchant koji.
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.29%, plus élevée que 21.6% des vulnérabilités.
- Correctif : mettre à jour vers 1.34.3, 1.35.1, 1.33.2 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| koji PyPI | ≥ 1.34.0, < 1.34.3≥ 1.35.0, < 1.35.1< 1.33.2
| 1.34.31.35.11.33.2
|
Description
A vulnerability in Koji was found. An unsanitized input allows for an XSS attack. Javascript code from a malicious link could be reflected in the resulting web page. It is not expected to be able to submit an action or make a change in Koji due to existing XSS protections in the code.
NVD description
A vulnerability in Koji was found. An unsanitized input allows for an XSS attack. Javascript code from a malicious link could be reflected in the resulting web page. It is not expected to be able to submit an action or make a change in Koji due to existing XSS protections in the code
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free