Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2020-28364

A stored cross-site scripting (XSS) vulnerability affects the Web UI in Locust before 1.3.2, if the installation violates the usage expectations by exposing this UI to outside users.

VectorNETWORK

PublishedNov 09, 2020, 21:15

Published Bycve@mitre.org

Base Score

Score6.1

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

locust(PyPI)01.3.2N/A

References

https://docs.locust.io/en/stable/changelog.html

Weakness Type

CWE-79

CVSS Metrics

Base Score

6.1

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK