Inveniosoftware

CVE-2021-43781 Dec 06, 18:15 PyPI MEDIUM POC PATCH This Month

Invenio-Drafts-Resources is a submission/deposit module for Invenio, a software framework for research data management. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

CVE-2019-1020006 Jul 29, 15:15 PyPI MEDIUM POC PATCH This Month

invenio-app before 1.1.1 allows host header injection. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2019-1020005 Jul 29, 15:15 PyPI MEDIUM PATCH This Month

invenio-communities before 1.0.0a20 allows XSS. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2019-1020003 Jul 29, 15:15 PyPI MEDIUM PATCH This Month

invenio-records before 1.2.2 allows XSS. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2019-1020019 Jul 29, 14:15 PyPI MEDIUM POC PATCH This Month

invenio-previewer before 1.0.0a12 allows XSS. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.