Identifier
|
Related Record |
Severity
|
Date Published
|
Description | Versions Affected |
---|---|---|---|---|---|
CVE-2017-15213 | Medium | Oct 11, 2017 | Stored XSS vulnerability in Flyspray before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileges, via the real_na more... |
0.9.9.7, 0.9.9.5, 0.9.9.4, 0.9.7, 0.9.9.6, 0.9.9.2, 0.9.9.1, 0.9.9
|
|
BDSA-2017-1516 | High | Oct 31, 2017 | Improper input validation in Flyspray can lead to Cross site scripting (*XSS*) via `POST` request. |