Docassemble
Approved changes feed: RSS · Atom
cpe:2.3:a:jhpyle:docassemble:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Jhpyle (7baf883c-d361-5082-ba06-3e7b3a8fd735) |
|---|---|
| Product | Docassemble (a79aa006-9b0a-5090-a368-b0f86d9744c0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/jhpyle/docassemble |
purl2cpe | 2026-06-01 10:13:06.603450 |
pkg:pypi/docassemble |
purl2cpe | 2026-06-01 10:13:06.603452 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-27292 |
vulnerable | 2026-06-08 06:31:28.428888 |
Docassemble unauthorized access through URL manipulation
HIGH (7.5)
Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. The vulnerability has been patched in version 1.4.97 of the master branch.
Published: 2024-02-29T21:56:39.897Z
Updated: 2024-08-02T19:27:42.423Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27291 |
vulnerable | 2026-06-08 06:31:28.428538 |
Docassemble open redirect
MEDIUM (6.1)
Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, it is possible to create a URL that acts as an open redirect. The vulnerability has been patched in version 1.4.97 of the master branch.
Published: 2024-02-29T21:49:26.633Z
Updated: 2024-08-05T17:12:17.718Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27290 |
vulnerable | 2026-06-08 06:31:28.428041 |
Docassemble HTML and javascript injection
MEDIUM (6.1)
Docassemble is an expert system for guided interviews and document assembly. Prior to 1.4.97, a user could type HTML into a field, including the field for the user's name, and then that HTML could be displayed on the screen as HTML. The vulnerability has been patched in version 1.4.97 of the master branch.
Published: 2024-02-29T21:44:18.512Z
Updated: 2024-08-05T15:06:29.373Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.