Executive brief
SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.
Affected products
- PyPI sickrage
Junglewise Threat Intelligence
CVE-2018-9160: PYSEC-2018-101 - SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.
CVE-2018-9160 · Severity: low · CVSS 3 · Published 2018-03-31
Technologies: sickrage (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2021-148 - In SiCKRAGE, versions 9.3.54.dev1 to 10.0.11.dev1 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being validat
- PYSEC-2021-147 - in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated proper