Approved changes feed: RSS · Atom

cpe:2.3:a:pyload:pyload/pyload:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPyload (13d569a8-bee6-54cc-aa16-925a7cdd1dac)
ProductPyload/Pyload (225c5412-90a5-5c84-a29e-e4a43f8f7eb8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-1240 vulnerable 2026-06-08 06:25:39.645816 Open Redirection in pyload/pyload
MEDIUM (4.6)
An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishing or other malicious activities. The issue is fixed in pyload-ng 0.5.0b3.dev79.
Published: 2024-11-15T10:57:07.797Z
Updated: 2024-11-15T19:07:26.471Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0509 vulnerable 2026-06-08 05:52:31.819041 Improper Certificate Validation in pyload/pyload
HIGH (7.4)
Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44.
Published: 2023-01-26T00:00:00.000Z
Updated: 2025-03-31T16:45:30.444Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0488 vulnerable 2026-06-08 05:52:31.742333 Cross-site Scripting (XSS) - Stored in pyload/pyload
CRITICAL (9.6)
Cross-site Scripting (XSS) - Stored in GitHub repository pyload/pyload prior to 0.5.0b3.dev42.
Published: 2023-01-26T00:00:00.000Z
Updated: 2025-03-31T16:47:00.638Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0435 vulnerable 2026-06-08 05:52:04.947465 Excessive Attack Surface in pyload/pyload
MEDIUM (4)
Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41.
Published: 2023-01-22T00:00:00.000Z
Updated: 2025-04-02T15:50:20.297Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0434 vulnerable 2026-06-08 05:52:04.944778 Improper Input Validation in pyload/pyload
MEDIUM (5.4)
Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40.
Published: 2023-01-22T00:00:00.000Z
Updated: 2025-04-02T15:51:41.649Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0297 vulnerable 2026-06-08 05:52:04.709436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0227 vulnerable 2026-06-08 05:52:04.557555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0057 vulnerable 2026-06-08 05:52:04.191565 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0055 vulnerable 2026-06-08 05:52:04.175308 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.