CVE-2019-11556
Fixed in a distro release EPSS <1%
Pagure before 5.6 allows XSS via the templates/blame.html blame view.
Products: redhat pagure, opensuse backports_sle, opensuse leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Package Hub 15 SP1 | pagure | 5.5-bp151.2.3.1 |
| openSUSE Leap 15.1 | pagure | 5.5-lp151.2.3.1 |