In breve
- CVE-2024-9427 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda koji.
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.29%, superiore al 21.6% delle vulnerabilità.
- Correzione: aggiornare a 1.34.3, 1.35.1, 1.33.2 o successiva.
| Package | Affected versions | Patched versions |
|---|
| koji PyPI | ≥ 1.34.0, < 1.34.3≥ 1.35.0, < 1.35.1< 1.33.2
| 1.34.31.35.11.33.2
|
Description
A vulnerability in Koji was found. An unsanitized input allows for an XSS attack. Javascript code from a malicious link could be reflected in the resulting web page. It is not expected to be able to submit an action or make a change in Koji due to existing XSS protections in the code.
NVD description
A vulnerability in Koji was found. An unsanitized input allows for an XSS attack. Javascript code from a malicious link could be reflected in the resulting web page. It is not expected to be able to submit an action or make a change in Koji due to existing XSS protections in the code
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free