wikimedia/analytics-quarry-web

Releases0

Stars43

Github mirror of "analytics/quarry/web" - our actual code is hosted with Gerrit (please see https://www.mediawiki.org/wiki/Developer_access for contributing

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2020-36324 ↗	Apr 21, 2021Wednesday, 21 April 2021, 20:15	6.1 MEDIUM	4.3 MEDIUM
Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type.