Skip to content
OpenAdvisories
Medium DLA-298-1 4 CVEs

roundup - security update

Published Aug 23, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 roundup 1.4.15-3+deb6u1

Vulnerabilities 4

  • Medium 6.1
    CVE-2012-6133

    Multiple cross-site scripting (XSS) vulnerabilities in Roundup

    Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML via the (1) @ok_message or (2) @error_message parameter to issue*.

    Roundup Roundup roundup PyPI
  • Medium —
    CVE-2012-6130

    Roundup Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via a username, related to generating a link.

    roundup PyPI
  • Medium —
    CVE-2012-6131

    Roundup Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the @action parameter to support/issue1.

    roundup PyPI
  • Medium —
    CVE-2012-6132

    Roundup Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter.

    roundup PyPI