Bitcoin-abe Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Bitcoin-abe Project records in CISA KEV

No Bitcoin-abe Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bitcoin-abe 1 record LOW

Records

1 record

TI-2020-09608 CVE-2020-11944 · GHSA-vmhh-cg3j-vcv3

Abe (aka bitcoin-abe) through 0.7.2, and 0.8pre, allows XSS in call in abe.py because…

LOW 30

Abe (aka bitcoin-abe) through 0.7.2, and 0.8pre, allows XSS in __call__ in abe.py because the PATH_INFO environment variable is mishandled during a PageNotFound exception.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01246 Published 2020-04-20 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0