← All advisories

Medium severity6.1NVD Advisory· Published Jan 10, 2019· Updated Jun 17, 2026

CVE-2017-1002152

CVE-2017-1002152

Description

Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
bodhiPyPI	< 2.9.1	2.9.1

Affected products

3

Fedora Project Infrastructure/Bodhiv5
Range: unspecified
Red Hat/Bodhi
cpe:2.3:a:redhat:bodhi:*:*:*:*:*:*:*:*
Range: <=2.9.0
ghsa-coords
pkg:pypi/bodhi
Range: < 2.9.1

Patches

Vulnerability mechanics

References

6

github.com/fedora-infra/bodhi/issues/1740nvdExploitIssue TrackingWEB
github.com/advisories/GHSA-h896-6hcp-gj6cghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2017-1002152ghsaADVISORY
bugzilla.redhat.com/show_bug.cgighsaWEB
github.com/fedora-infra/bodhi/commit/2a3b06b42242ecabb7fed6b147b033b36292d76fghsaWEB
github.com/pypa/advisory-database/tree/main/vulns/bodhi/PYSEC-2019-150.yamlghsaWEB

News mentions

0

No linked articles in our index yet.