jhpyle/docassemble

jhpyle/docassemble

docassemble.org

Releases897

Frequency3 days 16 hours

Last Release 11 days ago

Stars955

A free, open-source expert system for guided interviews and document assembly, based on Python, YAML, and Markdown.

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-27290 ↗	Mar 21, 2024Thursday, 21 March 2024, 02:52	6.1 MEDIUM	—
Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, a user could type HTML into a field, including the field for the user's name, and then that HTML could be displayed on the screen as HTML. The vulnerability has been patched in version 1.4.97 of the master branch.
CVE-2024-27291 ↗	Mar 21, 2024Thursday, 21 March 2024, 02:52	6.1 MEDIUM	—
Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, it is possible to create a URL that acts as an open redirect. The vulnerability has been patched in version 1.4.97 of the master branch.
CVE-2024-27292 ↗	Mar 21, 2024Thursday, 21 March 2024, 02:52	7.5 HIGH	—
Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. The vulnerability has been patched in version 1.4.97 of the master branch.