CVE-2020-36324

MEDIO 6.1CVE-2020-36324 · Published 21/04/2021 · updated 17/06/2026

In breve

CVE-2020-36324 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda analytics-quarry-web (wikimedia).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.63%, superiore al 50.0% delle vulnerabilità.
Correzione: aggiornare a 2020-12-15 o successiva.

Package	Affected versions	Patched versions
analytics-quarry-web wikimedia	`< 2020-12-15`	`2020-12-15`

Description

Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type.

References

wikimedia/analytics-quarry-web commit 4b7e1d6 · Patch
quarry.wmflabs.org · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free