Skip to content
OpenAdvisories

Vendor

jhpyle

3 known vulnerabilities.

Products

docassemble 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-27291

    Docassemble open redirect

    Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, it is possible to create a URL that acts as an open redirect. The vulnerability has been patched in version 1.4.97 of the master branch.

    jhpyle docassemble docassemble-webapp PyPI
  • Medium 6.1
    CVE-2024-27290

    Docassemble HTML and javascript injection

    Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, a user could type HTML into a field, including the field for the user's name, and then that HTML could be displayed on the screen as HTML. The vulnerability has been…

    jhpyle docassemble docassemble-webapp PyPI