CVE-2020-28364

Description

A stored cross-site scripting (XSS) vulnerability affects the Web UI in Locust before 1.3.2, if the installation violates the usage expectations by exposing this UI to outside users.

Risk Information

Base Score

6.1

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS Score

Exploitation Probability

0.359

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-28364 are fixed in Python-locust 1.3.2	Windows
Vulnerabilities CVE-2020-28364 are fixed in Python-locust for linux 1.3.2	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234