CVE-2008-1474
CVE-2008-1474
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and attack vectors, some of which may be related to cross-site scripting (XSS).
CVSS 6.1 · Medium · EPSS 1.5% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
roundup PyPI
- Versions
- 0.5.9
- 0.6.11
- 0.6.8
- 0.6.9
- 0.7.0
- 0.7.0b3
- 0.7.1
- 0.7.11
- 0.7.12
- 0.7.2
- 0.7.3
- 0.7.4
- 0.7.5
- 0.7.7
- 0.7.8
- 0.7.9
- 0.8.0
- 0.8.0b1
- 0.8.1
- 0.8.2
- 0.8.3
- 0.8.4
- 0.8.5
- 0.8.6
- 0.9.0b1
- 1.0
- 1.0.1
- 1.1.0
- 1.1.1
- 1.1.2
- 1.2.0
- 1.2.1
- 1.3.0
- 1.3.1
- 1.3.2
- 1.3.3
- 1.4.0
- 1.4.1
- 1.4.2
- 1.4.3
- Affected ranges
- ECOSYSTEM: < 1.4.4
Update to 1.4.4
Original sources
- http://secunia.com/advisories/29848
- http://secunia.com/advisories/30274
- http://security.gentoo.org/glsa/glsa-200805-21.xml
- http://www.securityfocus.com/bid/28239
- http://secunia.com/advisories/29336
- https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00375.html
- http://www.debian.org/security/2008/dsa-1554
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41241
- http://roundup.cvs.sourceforge.net/roundup/roundup/CHANGES.txt?revision=1.939&view=markup
- https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00264.html
- http://secunia.com/advisories/29375
- https://bugzilla.redhat.com/show_bug.cgi?id=436546
- http://www.vupen.com/english/advisories/2008/0891
- https://nvd.nist.gov/vuln/detail/CVE-2008-1474