@contentful

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

@contentful records in CISA KEV

No @contentful vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Python Example · all components

TI-2020-10383 CVE-2020-13258 · GHSA-g5j6-r3x9-gf2m

LOW 31

Contentful through 2020-05-21 for Python allows reflected XSS, as demonstrated by the api parameter to the-example-app.py.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02063 Published 2020-05-21 Fixed in 1.12.4 CWE-79