id: PYSEC-2023-208
modified: 2023-10-20T16:31:18.806057Z
published: 2023-02-06T17:15:00Z
aliases:
- CVE-2020-36660
- GHSA-fxqx-xgqq-gf42
details: A vulnerability was found in paxswill EVE Ship Replacement Program 0.12.11.
  It has been rated as problematic. This issue affects some unknown processing of
  the file src/evesrp/views/api.py of the component User Information Handler. The
  manipulation leads to information disclosure. The attack may be initiated remotely.
  Upgrading to version 0.12.12 is able to address this issue. The patch is named 9e03f68e46e85ca9c9694a6971859b3ee66f0240.
  It is recommended to upgrade the affected component. The associated identifier of
  this vulnerability is VDB-220211.
affected:
- package:
    ecosystem: PyPI
    name: eve-srp
    purl: pkg:pypi/eve-srp
  ranges:
  - type: GIT
    events:
    - introduced: "0"
    - fixed: 9e03f68e46e85ca9c9694a6971859b3ee66f0240
    repo: https://github.com/paxswill/evesrp
  - type: ECOSYSTEM
    events:
    - introduced: "0"
  versions:
  - 0.10.0
  - 0.10.1
  - 0.10.2
  - 0.10.4
  - 0.10.5
  - 0.10.5.1
  - 0.11.0
  - 0.11.1
  - 0.11.2
  - 0.11.3
  - 0.11.4
  - 0.11.5
  - 0.11.6
  - 0.11.7
  - 0.11.8
  - 0.12.0
  - 0.12.1
  - 0.12.10
  - 0.12.11
  - 0.12.5
  - 0.12.6
  - 0.12.7
  - 0.12.8
  - 0.12.9
  - "0.3"
  - "0.4"
  - 0.4.10
  - 0.4.7
  - 0.4.8
  - 0.4.9
  - "0.5"
  - 0.5.1
  - 0.5.2
  - 0.5.3
  - 0.5.4
  - 0.6.0
  - 0.6.1
  - 0.6.2
  - 0.6.3
  - 0.6.4
  - 0.6.5
  - 0.7.1
  - 0.8.0
  - 0.8.1
  - 0.8.5
  - 0.8.6
  - 0.8.7
  - 0.9.0
  - 0.9.1
  - 0.9.2
  - 0.9.3
  - 0.9.4
  - 0.9.5
  - 0.9.6
  - 0.9.7
  - 0.9.8
  - 0.9.9
  - 0.9.9.1
severity:
- type: CVSS_V3
  score: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
references:
- type: WEB
  url: https://vuldb.com/?id.220211
- type: WEB
  url: https://vuldb.com/?ctiid.220211
- type: FIX
  url: 
    https://github.com/paxswill/evesrp/commit/9e03f68e46e85ca9c9694a6971859b3ee66f0240
- type: WEB
  url: https://github.com/paxswill/evesrp/releases/tag/v0.12.12
- type: ADVISORY
  url: https://github.com/advisories/GHSA-fxqx-xgqq-gf42