Hopetree/izone

Hopetree/izone

Releases7

Frequency9 months 6 days

Last Release over 2 years ago

Stars1.23K

一个基于Django的博客项目，也可以当做一个文档管理网站使用，自带评论、定时任务等功能，界面简约而不简单

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-50811 ↗	Nov 8, 2024Friday, 8 November 2024, 19:15	9.1 CRITICAL	—
hopetree izone lts c011b48 contains a server-side request forgery (SSRF) vulnerability in the active push function as \\apps\\tool\\apis\\bd_push.py does not securely filter user input through push_urls() and get_urls().
CVE-2024-50810 ↗	Nov 8, 2024Friday, 8 November 2024, 19:15	5.4 MEDIUM	—
hopetree izone lts c011b48 contains a Cross Site Scripting (XSS) vulnerability in the article comment function. In \apps\comment\views.py, AddCommintView() does not securely filter user input and renders it directly to the frontend page through templates.