Skip to content
OpenAdvisories

Vendor

Jazzband

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.4

    tablib versions prior to 3.10.0 Stored XSS via HTML Export Dataset Title

    tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers to execute arbitrary JavaScript by embedding malicious payloads in dataset titles, which are interpolated unsanitized into HTML …

  • Medium 6.5

    Session key exposure through session list in Django User Sessions

    In Django User Sessions (django-user-sessions) before 1.7.1, the views provided allow users to terminate specific sessions. The session key is used to identify sessions, and thus included in the rendered HTML. In itself this is not a problem. However if the w…