Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
No build reason found for SLE-Module-Web-Scripting:x86_64
SUSE:SLE-12-SP1:GA
mailman.24378
CVE-2021-43331-XSS_CGI_options.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File CVE-2021-43331-XSS_CGI_options.patch of Package mailman.24378
--- Mailman/Cgi/options.py | 2 ++ 1 file changed, 2 insertions(+) --- a/Mailman/Cgi/options.py +++ b/Mailman/Cgi/options.py @@ -263,6 +263,8 @@ def main(): varhelp = qs[0] if varhelp: # Sanitize the topic name. + while '%' in varhelp: + varhelp = urllib.unquote_plus(varhelp) varhelp = re.sub('<.*', '', varhelp) topic_details(mlist, doc, user, cpuser, userlang, varhelp) return
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor