Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Beaker-project Component: Beaker Clear all filters
TI-2015-02794 CVE-2015-3162 · GHSA-g42q-56q7-436g

Cross-site scripting (XSS) vulnerability in the edit comment dialog in…

Priority LOW 26

Cross-site scripting (XSS) vulnerability in the edit comment dialog in bkr/server/widgets.py in Beaker 20.1 allows remote authenticated users to inject arbitrary web script or HTML via writing a crafted comment on an ack…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00929 Published 2017-09-06 No fix listed CWE-79
TI-2015-02792 CVE-2015-3160 · GHSA-3qjf-f83f-x2pm

XML external entity (XXE) vulnerability in bkr/server/jobs.py in Beaker before 20.1…

Priority LOW 23

XML external entity (XXE) vulnerability in bkr/server/jobs.py in Beaker before 20.1 allows remote authenticated users to obtain sensitive information via submitting job XML to the server containing entity references whic…

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01284 Published 2017-09-06 No fix listed CWE-611