OMERO.web uses jquery-form library, which may be vulnerable to XSS attack

概要

参考情報

• ome/omero-web security advisory · WEB
• jquery-form/form · WEB
• ome/omero-web commit a3eadf7 · WEB
• ome/omero-web · PACKAGE

omero-web のその他の脆弱性

• CVE-2025-54791中 5.3OMERO.web provides a web based client and plugin infrastructure. Prior to version 5.29.2, if an error occurred when resetting a user's passw…
• CVE-2024-35180中 6.1OMERO.web provides a web based client and plugin infrastructure. There is currently no escaping or validation of the `callback` parameter th…
• CVE-2021-41132中 6.1OMERO.web provides a web based client and plugin infrastructure. In versions prior to 5.11.0, a variety of templates do not perform proper s…
• CVE-2021-21377中 5.4OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 supports redirection to a giv…
• CVE-2021-21376中 6.5OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 loads various information abo…