Pyload Pyload vulnerabilities

9 known vulnerabilities affecting pyload/pyload_pyload.

Total CVEs

9

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL2HIGH2MEDIUM5

Vulnerabilities

Page 1 of 1

CVE-2024-1240MEDIUMCVSS 6.1≥ unspecified, < pyload-ng 0.5.0b3.dev792024-11-15

CVE-2024-1240 [MEDIUM] CWE-601 CVE-2024-1240: An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishing or other malicious activities. The issue is fixed in pyload-ng 0.5.0b3

CVE-2023-0509HIGHCVSS 7.4≥ unspecified, < 0.5.0b3.dev442023-01-26

CVE-2023-0509 [HIGH] CWE-295 CVE-2023-0509: Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44. Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44.

CVE-2023-0488MEDIUMCVSS 5.4≥ unspecified, < 0.5.0b3.dev422023-01-26

CVE-2023-0488 [MEDIUM] CWE-79 CVE-2023-0488: Cross-site Scripting (XSS) - Stored in GitHub repository pyload/pyload prior to 0.5.0b3.dev42. Cross-site Scripting (XSS) - Stored in GitHub repository pyload/pyload prior to 0.5.0b3.dev42.

CVE-2023-0435CRITICALCVSS 9.8≥ unspecified, < 0.5.0b3.dev412023-01-22

CVE-2023-0435 [CRITICAL] CWE-1125 CVE-2023-0435: Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41. Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41.

CVE-2023-0434HIGHCVSS 7.5≥ unspecified, < 0.5.0b3.dev402023-01-22

CVE-2023-0434 [HIGH] CWE-20 CVE-2023-0434: Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40. Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40.

CVE-2023-0297CRITICALCVSS 9.8PoC≥ unspecified, < 0.5.0b3.dev312023-01-14

CVE-2023-0297 [CRITICAL] CWE-94 CVE-2023-0297: Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31. Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31.

CVE-2023-0227MEDIUMCVSS 6.5≥ unspecified, < 0.5.0b3.dev362023-01-12

CVE-2023-0227 [MEDIUM] CWE-613 CVE-2023-0227: Insufficient Session Expiration in GitHub repository pyload/pyload prior to 0.5.0b3.dev36. Insufficient Session Expiration in GitHub repository pyload/pyload prior to 0.5.0b3.dev36.

CVE-2023-0057MEDIUMCVSS 6.1≥ unspecified, < 0.5.0b3.dev332023-01-05

CVE-2023-0057 [MEDIUM] CWE-1021 CVE-2023-0057: Improper Restriction of Rendered UI Layers or Frames in GitHub repository pyload/pyload prior to 0.5 Improper Restriction of Rendered UI Layers or Frames in GitHub repository pyload/pyload prior to 0.5.0b3.dev33.

CVE-2023-0055MEDIUMCVSS 5.3≥ unspecified, < 0.5.0b3.dev322023-01-04

CVE-2023-0055 [MEDIUM] CWE-614 CVE-2023-0055: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository pyload/pyload prio Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32.