CVE-2017-10516
Updated python-werkzeug packages fix security vulnerability
Cross-site scripting (XSS) vulnerability in the render_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 allows remote attackers to inject arbitrary web script or HTML via a field that contains an exception message (CVE-2016-10516).
What each source reports
OSVMGASA-2018-0040 No score
Updated python-werkzeug packages fix security vulnerability
Cross-site scripting (XSS) vulnerability in the render_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 allows remote attackers to inject arbitrary web script or HTML via a field that contains an exception message (CVE-2016-10516).
- Record
MGASA-2018-0040- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
python-werkzeugMageia:5 |
before 0.9.4-7.1.mga5 | 0.9.4-7.1.mga5 |
python-werkzeugMageia:6 |
before 0.11.3-1.1.mga6 | 0.11.3-1.1.mga6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-10516 is a vulnerability with no CVSS score yet in python-werkzeug, published January 3, 2018. No source lists public exploit code. Fixed in python-werkzeug 0.9.4-7.1.mga5.