Vulnerabilities > Roundup Tracker > Roundup > 1.6
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2019-04-06 | CVE-2019-10904 | Cross-site Scripting vulnerability in multiple products Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgi_handler.py mishandle 404 errors. | 4.3 |