CVE-2016-10516: XSS

Q: What is the severity of CVE-2016-10516?

The CVE-2016-10516 vulnerability is classified as a moderate severity cross-site scripting (XSS) issue.

Q: How do I fix CVE-2016-10516?

To fix CVE-2016-10516, you should upgrade to Werkzeug version 0.11.11 or later.

Q: Which versions of Werkzeug are affected by CVE-2016-10516?

Versions of Werkzeug prior to 0.11.11 are affected by CVE-2016-10516.

Q: What type of vulnerability is CVE-2016-10516?

CVE-2016-10516 is a cross-site scripting (XSS) vulnerability that allows injection of web scripts or HTML.

Q: Where does the CVE-2016-10516 vulnerability occur?

The CVE-2016-10516 vulnerability occurs in the render_full function within debug/tbtools.py in Werkzeug.

Published Oct 23, 2017

Updated

Cross-site scripting (XSS) vulnerability in the renderfull function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 (as used in Pallets Flask and other products) allows remote attackers to inject arbitrary web script or HTML via a field that contains an exception message.

Affected Software

2 affected componentsFixes available

pip/Werkzeug<0.11.11

0.11.11

palletsprojects Werkzeug<0.11.11

Event History

Oct 23, 2017

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

May 14, 2022

Advisory Published

via GitHub·03:46 AM

Frequently Asked Questions

What is the severity of CVE-2016-10516?

The CVE-2016-10516 vulnerability is classified as a moderate severity cross-site scripting (XSS) issue.

How do I fix CVE-2016-10516?

To fix CVE-2016-10516, you should upgrade to Werkzeug version 0.11.11 or later.

Which versions of Werkzeug are affected by CVE-2016-10516?

Versions of Werkzeug prior to 0.11.11 are affected by CVE-2016-10516.

What type of vulnerability is CVE-2016-10516?

CVE-2016-10516 is a cross-site scripting (XSS) vulnerability that allows injection of web scripts or HTML.

Where does the CVE-2016-10516 vulnerability occur?