Bitcoin-Abe Project: Security Vulnerabilities
Abe (aka bitcoin-abe) through 0.7.2, and 0.8pre, allows XSS in __call__ in abe.py because the PATH_INFO environment variable is mishandled during a PageNotFound exception.
CVSS Score
6.1
EPSS Score
0.004
Published
2020-04-20