ethyca-fides vulnerabilities (PyPI)
22 vulnerabilities.
-
ethyca-fidesPyPI Fides: DOM-based XSS vulnerability in fides.js via fides_description override 7.0 High -
ethyca-fidesPyPI Fides: Privacy Request Identity Verification Bypass Vulnerability via Duplicate Detection 6.1 Medium -
ethyca-fidesPyPI Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation 8.6 High -
ethyca-fidesPyPI Fides Webserver API Rate Limiting Vulnerability in Proxied Environments 6.3 Medium -
ethyca-fidesPyPI Fides Lacks Brute-Force Protections on Authentication Endpoints 1.7 Low -
ethyca-fidesPyPI Fides's Admin UI User Password Change Does Not Invalidate Current Session 1.7 Low -
ethyca-fidesPyPI Password Policy Bypass Vulnerability in Fides Webserver 2.0 Low -
ethyca-fidesPyPI Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine 9.1 Critical -
ethyca-fidesPyPI Fides Webserver Authentication Timing-Based Username Enumeration Vulnerability 5.3 Medium -
ethyca-fidesPyPI Fides Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL 5.3 Medium -
ethyca-fidesPyPI Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js 0.0 None -
ethyca-fidesPyPI Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints in Fides 6.5 Medium -
ethyca-fidesPyPI Partial Password Exposure Vulnerability in Fides Webserver Logs 2.3 Low -
ethyca-fidesPyPI Cryptographically Weak Generation of One-Time Codes for Identity Verification in ethyca-fides 8.2 High -
ethyca-fidesPyPI Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages 4.3 Medium -
ethyca-fidesPyPI Fides JavaScript Injection Vulnerability in Privacy Center URL 3.9 Low -
ethyca-fidesPyPI Fides Information Disclosure Vulnerability in Config API Endpoint 6.5 Medium -
ethyca-fidesPyPI Server-Side Request Forgery Vulnerability in Custom Integration Upload 8.2 High -
ethyca-fidesPyPI Remote Code Execution in Custom Integration Upload in Fides 8.8 High -
ethyca-fidesPyPI Fides Webserver Vulnerable to Zip Bomb File Uploads 2.7 Low -
ethyca-fidesPyPI Fides Webserver Vulnerable to SVG Bomb File Uploads 2.7 Low -
ethyca-fidesPyPI Fides vulnerable to Path Traversal in Webserver API 7.5 High