CVE-2018-25056

Low

Description

A vulnerability, which was classified as problematic, was found in yolapi. Affected is the function render_description of the file yolapi/pypi/metadata.py. The manipulation of the argument text leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is a0fe129055a99f429133a5c40cb13b44611ff796. It is recommended to apply a patch to fix this issue. VDB-216966 is the identifier assigned to this vulnerability.

SeverityLow

CVSS3.5

Exploit probability—

Product

Yolapi

PublishedDec 28, 2022

First seenDec 28, 2022

Weakness typeCWE-79Cross-site scripting (XSS)

How to fix

Patches

github.com/yola/yolapi/commit/a0fe129055a99f429133a5c40cb13b44611ff796

Affected products

Product	Affected versions	Fixed in
yola yolapi	No range specified	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.