Vendor

Invenio

4 known vulnerabilities.

Products

invenio-app 1 invenio-communities 1 invenio-previewer 1 invenio-records 1

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Medium 6.1

CVE-2019-1020006

Invenio-App vulnerable to host header injection attack

invenio-app before 1.1.1 allows host header injection.

Invenio invenio-app invenio-app PyPI

Jul 29, 2019
Medium 5.4

CVE-2019-1020005

Cross-site Scripting in invenio-communities

invenio-communities before 1.0.0a20 allows XSS.

Invenio invenio-communities invenio-communities PyPI

Jul 29, 2019
Medium 5.4

CVE-2019-1020003

Cross-site scripting invenio-records

invenio-records before 1.2.2 allows XSS.

Invenio invenio-records invenio-records PyPI

Jul 29, 2019
Medium 6.1

CVE-2019-1020019

Cross-site Scripting in invenio-previewer

invenio-previewer before 1.0.0a12 allows XSS.

Invenio invenio-previewer invenio-previewer PyPI

Jul 29, 2019