CVE-2020-36660

Advisory

Eve-srp 0.12.12 includes a fix for CVE-2020-36660: This issue affects some unknown processing of the file src/evesrp/views/api.py of the component User Information Handler. The manipulation leads to information disclosure. The attack may be initiated remotely.
https://github.com/paxswill/evesrp/commit/9e03f68e46e85ca9c9694a6971859b3ee66f0240
NOTE: The patched release is not on PyPI. Look for it in eve-srp GH repo.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://github.com/advisories/GHSA-fxqx-xgqq-gf42
• https://nvd.nist.gov/vuln/detail/CVE-2020-36660
• https://github.com/paxswill/evesrp/commit/9e03f68e46e85ca9c9694a6971859b3ee66f0240
• https://github.com/paxswill/evesrp
• https://github.com/paxswill/evesrp/releases/tag/v0.12.12
• https://vuldb.com/?ctiid.220211
• https://vuldb.com/?id.220211
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36660