3 ms·
This can detect when a CVE vulnerability is fixed but how would you know the version number at which it was introduced?
by svisser 10y ago
This can detect when a CVE vulnerability is fixed but how would you know the version number at which it was introduced?
- jayfk 10y agoMost CVEs have a pretty good descriptions. For example CVE-2016-6186[1]: Cross-site scripting (XSS) vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, and 1.10.x before 1.10rc1 allows remote attackers to inject arbitrary web script or HTML via vectors involving unsafe usage of Element.innerHTML. [1] http://www.cvedetails.com/cve/CVE-2016-6186/ http://www.cvedetails.com/cve/CVE-2016-6186/