Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Pythonpaste Component: Paste Clear all filters
TI-2012-00813 CVE-2012-0878 · GHSA-27px-qpmj-qg38

Paste Script 1.7.5 and earlier does not properly set group memberships during execution…

Priority LOW 30

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.04027 Published 2012-05-01 Fixed in 2.0.1, 1.7.5.1 CWE-264
TI-2010-02379 CVE-2010-2477 · GHSA-7gfc-2v6g-6w9f

Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions…

Priority LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code,…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02288 Published 2010-11-05 Fixed in 1.7.4 CWE-79