Skip to content
OpenAdvisories

Package · PyPI

paste

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2012-0878

    Paste Script has improper group memberships permissions

    Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem.

    paste pastescript pastescript Debian PyPI
  • Medium 6.1
    CVE-2010-2477

    Paste is vulnerable to Cross-site Scripting via vectors involving a 404 status code

    Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to (1) paste.urlparser.StaticUR…

    paste paste Debian PyPI