Djblets

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-3995 PyPI MEDIUM POC PATCH This Month

Cross-site scripting (XSS) vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject arbitrary web script or. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

XSS Python Djblets

NVD GitHub

CVSS 2.0

4.3

EPSS

0.4%

CVE-2014-3994 PyPI MEDIUM POC PATCH This Month

Cross-site scripting (XSS) vulnerability in util/templatetags/djblets_js.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django, as used in Review Board, allows remote attackers to inject. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

XSS Python Djblets Reviewboard

NVD GitHub

CVSS 2.0

4.3

EPSS

0.6%

CVE-2014-3995 PyPI

EPSS 0% CVSS 4.3

MEDIUM POC PATCH This Month

XSS Python Djblets

NVD GitHub

CVE-2014-3994 PyPI

EPSS 1% CVSS 4.3

MEDIUM POC PATCH This Month

XSS Python Djblets +1

NVD GitHub