Moderate severity vulnerability that affects roundup
Moderate severity
GitHub Reviewed
Published
Apr 9, 2019
to the GitHub Advisory Database
•
Updated Jan 9, 2023
Description
Published to the GitHub Advisory Database
Apr 9, 2019
Reviewed
Jun 16, 2020
Last updated
Jan 9, 2023
Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgi_handler.py mishandle 404 errors.
References