Xunfeng Project Xunfeng
2 CVEs affecting Xunfeng Project Xunfeng. Latest disclosed: 2018-09-12. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-16951 | High | 8.0 | 2018-09-12 | xunfeng 0.2.0 allows command execution via CSRF because masscan.py mishandles backquote characters, a related issue to CVE-2018-16832. |
CVE-2018-16832 | Medium | 6.5 | 2018-09-11 | CSRF in the anti-csrf decorator in xunfeng 0.2.0 allows an attacker to modify the configuration via a Flash file because views/lib/AntiCSRF.py can overwrite th… |