CVE-2020-7734
Cross-site Scripting (XSS)
LOW 2.3EPSS 1.3%
All versions of package cabot are vulnerable to Cross-site Scripting (XSS) via the Endpoint column.
- Affected
- cabot
- CVSS v4.0 GitHub
- 2.3 LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:L/E:U - CVSS v3.1 SNYK
- 8.2 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L - CVSS v2.0 NVD
- 3.5 LOW
AV:N/AC:M/Au:S/C:N/I:P/A:N - EPSS
- 1.28% chance of exploitation in the next 30 days, 70th percentile
- Published
- 2020-09-22
- Updated
- 2024-09-16
Proof-of-concept exploits (2)
- arachnys/cabot/pull/6945678★ · 2023-09-10
- https://www.exploit-db.com/exploits/48791
Security advisories
- https://itsmeanonartist.tech/blogs/blog2.html
- https://snyk.io/vuln/SNYK-PYTHON-CABOT-609862
- advisories/GHSA-mqwh-r366-4224