Security Advisory

CVE-2021-39286

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-08-18 17:31:34
Last updated 2024-08-04 02:06:41
Assigner mitre
State PUBLISHED

Description

Webrecorder pywb before 2.6.0 allows XSS because it does not ensure that Jinja2 templates are autoescaped.