Vulnerabilities > Redhat > Pagure > 2.3.4

DATE CVE VULNERABILITY TITLE RISK
2020-09-25 CVE-2019-11556 Cross-site Scripting vulnerability in multiple products
Pagure before 5.6 allows XSS via the templates/blame.html blame view.
network
low complexity
redhat opensuse CWE-79
6.1
6.1
2017-09-14 CVE-2017-1002151 Missing Authorization vulnerability in Redhat Pagure
Pagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization
network
low complexity
redhat CWE-862
7.5
7.5