Skip to content
OpenAdvisories

Package · PyPI

cherrymusic

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.4
    CVE-2015-8310

    Cherry Music Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to inject arbitrary web script or HTML via the playlistname field when creating a new playlist.

    cherrymusic PyPI
  • Medium 4.3
    CVE-2015-8309 Public exploit

    Cherry Music directory traversal vulnerability

    Directory traversal vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to read arbitrary files via the "value" parameter to "download."

    cherrymusic PyPI