{"id":"CVE-2019-1020005","details":"invenio-communities before 1.0.0a20 allows XSS.","aliases":["GHSA-mfv8-q39f-mgfg","PYSEC-2019-25"],"modified":"2026-07-09T01:06:11.768330Z","published":"2019-07-29T15:15:11.967Z","references":[{"type":"ADVISORY","url":"https://github.com/inveniosoftware/invenio-communities/security/advisories/GHSA-mfv8-q39f-mgfg"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/inveniosoftware/invenio-communities","events":[{"introduced":"442dfe3c27cee17457a98ba4f9dd1057f6ec93b5"},{"last_affected":"1e3b4bca26fb8d44c96aeed1790ca6667c21ea2e"}],"database_specific":{"extracted_events":[{"introduced":"1.0.0-a1"},{"last_affected":"1.0.0-a1"},{"introduced":"1.0.0-a10"},{"last_affected":"1.0.0-a10"},{"introduced":"1.0.0-a11"},{"last_affected":"1.0.0-a11"},{"introduced":"1.0.0-a12"},{"last_affected":"1.0.0-a12"},{"introduced":"1.0.0-a13"},{"last_affected":"1.0.0-a13"},{"introduced":"1.0.0-a14"},{"last_affected":"1.0.0-a14"},{"introduced":"1.0.0-a15"},{"last_affected":"1.0.0-a15"},{"introduced":"1.0.0-a16"},{"last_affected":"1.0.0-a16"},{"introduced":"1.0.0-a17"},{"last_affected":"1.0.0-a17"},{"introduced":"1.0.0-a18"},{"last_affected":"1.0.0-a18"},{"introduced":"1.0.0-a19"},{"last_affected":"1.0.0-a19"},{"introduced":"1.0.0-a2"},{"last_affected":"1.0.0-a2"},{"introduced":"1.0.0-a3"},{"last_affected":"1.0.0-a3"},{"introduced":"1.0.0-a4"},{"last_affected":"1.0.0-a4"},{"introduced":"1.0.0-a5"},{"last_affected":"1.0.0-a5"},{"introduced":"1.0.0-a6"},{"last_affected":"1.0.0-a6"},{"introduced":"1.0.0-a7"},{"last_affected":"1.0.0-a7"},{"introduced":"1.0.0-a8"},{"last_affected":"1.0.0-a8"},{"introduced":"1.0.0-a9"},{"last_affected":"1.0.0-a9"}],"source":"CPE_STRING","cpe":["cpe:2.3:a:inveniosoftware:invenio-communities:1.0.0:a1:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-communities:1.0.0:a10:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-communities:1.0.0:a11:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-communities:1.0.0:a12:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-communities:1.0.0:a13:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-communities:1.0.0:a14:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-communities:1.0.0:a15:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-communities:1.0.0:a16:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-communities:1.0.0:a17:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-communities:1.0.0:a18:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-communities:1.0.0:a19:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-communities:1.0.0:a2:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-communities:1.0.0:a3:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-communities:1.0.0:a4:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-communities:1.0.0:a5:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-communities:1.0.0:a6:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-communities:1.0.0:a7:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-communities:1.0.0:a8:*:*:*:*:*:*","cpe:2.3:a:inveniosoftware:invenio-communities:1.0.0:a9:*:*:*:*:*:*"]}}],"versions":["1.0.0-a1","1.0.0-a10","1.0.0-a11","1.0.0-a12","1.0.0-a13","1.0.0-a14","1.0.0-a15","1.0.0-a16","1.0.0-a17","1.0.0-a18","1.0.0-a19","1.0.0-a2","1.0.0-a3","1.0.0-a4","1.0.0-a5","1.0.0-a6","1.0.0-a7","1.0.0-a8","1.0.0-a9","v1.0.0a9","v1.0.0a8","1.0.0a7","v1.0.0a6","v1.0.0a5","v1.0.0a4","v1.0.0a3","v1.0.0a2","v1.0.0a1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-1020005.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"}]}