CVE-2015-3161 The search bar code in bkr/server/widgets.py in Beaker before 20.1 does not escape </script> tags in string literals when producing JSON.
MediumCVSS 4.8
EPSS 0.83%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The search bar code in bkr/server/widgets.py in Beaker before 20.1 does not escape </script> tags in string literals when producing JSON.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| beaker-project beaker | <= 20.0 | No fix listed |
References
- [oss-security] 20150507 beaker vulns fixed in version 20.1 mailing-list third-party-advisory
- 74574 third-party-advisory vdb-entry
- beaker-project.org release-notes vendor-advisory
- bugzilla.redhat.com patch third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking patch third-party-advisory vdb-entry