CVE-2017-1002152

Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles.

Score

CVSS 3.1 6.1 Medium

Status

Modified - patrick@puiterwijk.org

Published

2019-01-10

Last modified

2024-09-16

Weaknesses

CWE-79, CWE-94

Affected products

• Bodhi (Fedora Project Infrastructure)
• Bodhi (Redhat)

References

• https://github.com/fedora-infra/bodhi/issues/1740