indico vulnerabilities (PyPI)
16 vulnerabilities.
-
indicoPyPI Indico: Cross-Site-Scripting in minutes editor 4.4 Medium -
indicoPyPI Indico: Cross-Site-Scripting in link fields 5.4 Medium -
indicoPyPI Indico: Missing access check in legacy session export API 4.3 Medium -
indicoPyPI Indico: Incomplete Server-Side Request Forgery (SSRF) check 6.8 Medium -
indicoPyPI Indico discloses local files resulting in Remote Code Execution through LaTeX injection 7.7 High -
indicoPyPI Indico missing access check in event series management API 6.5 Medium -
indicoPyPI Indico affected by Cross-Site-Scripting via material uploads 5.4 Medium -
indicoPyPI Indico has Server-Side Request Forgery (SSRF) in multiple places 6.9 Medium -
indicoPyPI Indico vulnerable to Cross-Site Scripting via LaTeX math code 4.6 Medium -
indicoPyPI Indico may disclose unauthorized user details access via legacy API 4.3 Medium -
indicoPyPI Indico vulnerable to user enumeration via API endpoint 5.3 Medium -
indicoPyPI Indico Insecure Access 0.0 None -
indicoPyPI Indico has a Cross-Site-Scripting during account creation 4.3 Medium -
indicoPyPI Cross-Site-Scripting via confirmation prompts 5.4 Medium -
indicoPyPI Indico Tampering with links (e.g. password reset) in sent emails 7.5 High -
indicoPyPI High severity vulnerability that affects indico No score