affected:
- package:
    ecosystem: PyPI
    name: repox
    purl: pkg:pypi/repox
  ranges:
  - events:
    - introduced: '0'
    type: ECOSYSTEM
  versions:
  - 0.0.1
  - 0.0.2
  - 0.0.3
aliases:
- CVE-2023-6719
details: An XSS vulnerability has been detected in Repox, which allows an attacker
  to compromise interactions between a user and the vulnerable application, and can
  be exploited by a third party by sending a specially crafted JavaScript payload
  to a user, and thus gain full control of their session.
id: PYSEC-2023-294
modified: '2024-11-21T14:23:00.74018Z'
published: '2023-12-13T10:15:00Z'
references:
- type: WEB
  url: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox
severity:
- score: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
  type: CVSS_V3
withdrawn: '2024-11-22T04:37:05Z'