VDB
GCVE-110-MAGEIA-2018-40
GCVE-110-MAGEIA-2018-40
Advisory Published
Cross-site scripting (XSS) vulnerability in the render_full function in
debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11
allows remote attackers to inject arbitrary web script or HTML via a
field that contains an exception message (CVE-2016-10516).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | python-werkzeug | 0.9.4-7.1.mga5 (unaffected), 0 (affected), 0 (affected), 0.9.4-7.1.mga5 (unaffected) | — |
| Mageia | python-werkzeug | 0 (affected), 0.11.3-1.1.mga6 (unaffected), 0 (affected), 0.11.3-1.1.mga6 (unaffected) | — |
| Mageia | kernel-firmware-nonfree | 0 (affected), 20180211-1.mga6.nonfree (unaffected) | — |
References
Browse GCVE Records
74,366 records in the GCVE database · Updated July 23, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.