CVE-2020-11022

Advisory

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

[This affected versions has been limited. Please create a free account to view the full affected versions.]

Fixed versions

[This fixed versions has been limited. Please create a free account to view the full fixed versions.]

Vulnerability changelog

* **SECURITY**: Upgraded jQuery from 3.4.1 to 3.6.0 (There is a XSS vulnerability in the version < 3.5.0 https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/)
* Moved the industry field from memberships to profiles.
* Users can view a list of their own directories.
* Added filters to ListNode (Thanks theox26)
* Added newsletter recipients on "Ready to Send" confirmation page
* Fixed a potential IntegrityError on user groups add.
* Fixed a TypeError on tickets search.
* Fixed a NoReverseMatch error in the photos view.

Resources

• https://pypi.org/project/tendenci
• https://pyup.io/changelogs/tendenci/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11022