CVE-2020-11944
EUVD-2020-428120.04.2020, 22:15
Abe (aka bitcoin-abe) through 0.7.2, and 0.8pre, allows XSS in __call__ in abe.py because the PATH_INFO environment variable is mishandled during a PageNotFound exception.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| bitcoin-abe_project | bitcoin-abe | 𝑥 ≤ 0.7.2 |
| bitcoin-abe_project | bitcoin-abe | 0.8:pre |
𝑥
= Vulnerable software versions
References