Executive brief
OMERO.web displays unecessary user information when requesting password reset
Affected products
- PyPI omero-web
Junglewise Threat Intelligence
CVE-2025-54791: PYSEC-2026-1717 - OMERO.web displays unecessary user information when requesting password reset
CVE-2025-54791 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: omero-web (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1718 - OMERO.web must check that the JSONP callback is a valid function
- OMERO.web uses jquery-form library, which may be vulnerable to XSS attack
- PYSEC-2021-379 - OMERO.web provides a web based client and plugin infrastructure. In versions prior to 5.11.0, a variety of templates do not perform proper s
- PYSEC-2021-32 - OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 supports redirection to a giv
- PYSEC-2021-31 - OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 loads various information abo