CVE-2020-7734

Advisory

In September 2020 it was reported that all versions of the cabot package are vulnerable to Cross-site Scripting (XSS) via the Endpoint column. The latest release of cabot at that date was version 0.11.7.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

All versions of package cabot are vulnerable to Cross-site Scripting (XSS) via the Endpoint column.


MISC:https://github.com/arachnys/cabot/pull/694: https://github.com/arachnys/cabot/pull/694
MISC:https://itsmeanonartist.tech/blogs/blog2.html: https://itsmeanonartist.tech/blogs/blog2.html
MISC:https://snyk.io/vuln/SNYK-PYTHON-CABOT-609862: https://snyk.io/vuln/SNYK-PYTHON-CABOT-609862
MISC:https://www.exploit-db.com/exploits/48791: https://www.exploit-db.com/exploits/48791

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7734
• https://itsmeanonartist.tech/blogs/blog2.html
• https://www.exploit-db.com/exploits/48791
• https://snyk.io/vuln/SNYK-PYTHON-CABOT-609862
• https://github.com/arachnys/cabot/pull/694