Security Advisory

CVE-2020-36324

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-04-21 19:43:59

Last updated 2024-08-04 17:23:10

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type.

← Browse all CVEs View on cve.org ↗