medium4.8
CVE-2020-25449
Cabot Cross Site Scripting (XSS) vulnerability via Address column
Impact
Cross Site Scripting (XSS) vulnerability in Arachnys Cabot up to and including 0.11.12 can be exploited via the Address column.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | cabot | <= 0.11.12 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arachnys | Cabot | Version 0.11.12 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://itsmeanonartist.tech/blogs/blog2.html
- https://packetstormsecurity.com/files/159070/Cabot-0.11.12-Cross-Site-Scripting.html
- https://www.exploit-db.com/exploits/48791
- https://www.exploitalert.com/view-details.html?id=36106
- https://github.com/advisories/GHSA-8q2h-4mq6-396j
- https://nvd.nist.gov/vuln/detail/CVE-2020-25449
- https://github.com/arachnys/cabot/commit/18708572cb0ed143842409419eada91160413973
- https://github.com/pypa/advisory-database/tree/main/vulns/cabot/PYSEC-2020-226.yaml