CVE-2019-16926: XSS
DISPUTED Flower 0.9.3 has XSS via a crafted worker name. NOTE: The project author stated that he doesn't think this is a valid vulnerability. Worker name and task name aren’t user facing configuration options. They are internal backend config options and person having rights to change them already has full access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-16926?
CVE-2019-16926 is classified as a disputed vulnerability with potential for cross-site scripting (XSS).
How do I fix CVE-2019-16926?
To address CVE-2019-16926, it is recommended to upgrade to Flower version 1.0.0 or later if applicable.
What does CVE-2019-16926 affect?
CVE-2019-16926 specifically affects the Flower project version 0.9.3.
Is CVE-2019-16926 a critical issue?
CVE-2019-16926 is not considered a critical issue due to its disputed nature and limited impact on user-facing features.
Can CVE-2019-16926 be exploited remotely?
Exploiting CVE-2019-16926 may require internal access to modify backend configurations, making it less likely to be exploited remotely.