CVE-2018-25056CWE-79

yolapi metadata.py render_description cross site scripting

Low · published December 28, 2022

CVSS v3.1
3.5
EPSS
1%
Percentile
43.1
In the wild
Unconfirmed
What it is

A vulnerability, which was classified as problematic, was found in yolapi. Affected is the function render_description of the file yolapi/pypi/metadata.py. The manipulation of the argument text leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is a0fe129055a99f429133a5c40cb13b44611ff796. It is recommended to apply a patch to fix this issue. VDB-216966 is the identifier assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00517 · 43.1th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-12-28T11:32Z
EPSS history
Timeline
  • 28 DEC 11:32Z
    yolapi metadata.py render_description cross site scripting
    cvelistv5