Approved changes feed: RSS · Atom

cpe:2.3:a:wikimedia:analytics-quarry-web:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWikimedia (15e2dd53-d178-575c-9871-f6b2d83e2814)
ProductAnalytics Quarry Web (744252ac-43b2-5f56-b3e6-f1ed41162ac0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wikimedia/analytics-quarry-web purl2cpe 2026-06-01 10:12:41.869161

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-36324 vulnerable 2026-06-03 14:42:33.488733 Details available
Wikimedia Quarry analytics-quarry-web before 2020-12-15 allows Reflected XSS because app.py does not explicitly set the application/json content type.
Published: 2021-04-21T19:43:59.000Z
Updated: 2024-08-04T17:23:10.467Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.