Skip to content
OpenAdvisories

Package · Debian

python-reportlab

4 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2020-28463

    Server-side Request Forgery (SSRF)

    All versions of package reportlab are vulnerable to Server-side Request Forgery (SSRF) via img tags. In order to reduce risk, use trustedSchemes & trustedHosts (see in Reportlab's documentation) Steps to reproduce by Karan Bamal: 1. Download and install the l…

    reportlab python-reportlab python-reportlab Debian Ubuntu PyPI