|
|
| |
|
| |
python: cross-site scripting
| Package(s): | python |
CVE #(s): | CVE-2011-4940
|
| Created: | June 18, 2012 |
Updated: | October 18, 2012 |
| Description: |
From the Red Hat advisory:
A flaw was found in the way the Python SimpleHTTPServer module generated
directory listings. An attacker able to upload a file with a
specially-crafted name to a server could possibly perform a cross-site
scripting (XSS) attack against victims visiting a listing page generated by
SimpleHTTPServer, for a directory containing the crafted file (if the
victims were using certain web browsers). |
| Alerts: |
|
( Log in to post comments)
|
|
|