CVE-2020-13258

Advisory

Contentful through 2020-05-21 for Python allows reflected XSS, as demonstrated by the api parameter to the-example-app.py.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Contentful through 2020-05-21 for Python allows reflected XSS, as demonstrated by the api parameter to the-example-app.py.


MISC:https://github.com/contentful/the-example-app.py/issues/44: https://github.com/contentful/the-example-app.py/issues/44

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13258
• https://github.com/contentful/the-example-app.py/issues/44