Read the docs

Ipsilon-project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Ipsilon-project records in CISA KEV

No Ipsilon-project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ipsilon 2 records LOW

Records

2 records

TI-2015-04378 CVE-2015-5216 · GHSA-3m2r-hxhv-ffj9

Cross-site scripting in Ipsilon

Priority LOW 30

The Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly escape certain characters in a Python exception-message template, which makes it easier for remote attackers to conduct cross-site script…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01272 Published 2020-02-17 Partial fix · 1.0.1 CWE-79
TI-2015-04377 CVE-2015-5215 · GHSA-m72r-m3rm-547r

Cross-site scripting in Ipsilon

Priority LOW 29

The default configuration of the Jinja templating engine used in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not enable auto-escaping, which makes it easier for remote attackers to conduct cross…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01069 Published 2020-02-17 Partial fix · 1.0.1 CWE-79
Open these records in search →