Vulnerabilities > Redhat > Pagure > 5.2

DATE CVE VULNERABILITY TITLE RISK
2020-09-25 CVE-2019-11556 Cross-site Scripting vulnerability in multiple products
Pagure before 5.6 allows XSS via the templates/blame.html blame view.
network
low complexity
redhat opensuse CWE-79
6.1
2019-02-08 CVE-2019-7628 Information Exposure vulnerability in Redhat Pagure 5.2
Pagure 5.2 leaks API keys by e-mailing them to users.
network
redhat CWE-200
4.3