Description
Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type.
Unscored
CVE-2020-36324
EUVD-2020-23863GHSA-3j62-59f5-6q98
Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json co…
Published Apr 21, 2021 · Updated Aug 4, 2024 · Assigned by mitre