CVE-2015-5215

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The default configuration of the Jinja templating engine used in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not enable auto-escaping, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via template variables. NOTE: This may be a duplicate of CVE-2015-5216. Moreover, the Jinja development team does not enable auto-escape by default for performance issues as explained in https://jinja.palletsprojects.com/en/master/faq/#why-is-autoescaping-not-the-default.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	Ipsilon	0.1.0 before 1.0.1

References

http://www.openwall.com/lists/oss-security/2015/10/23/10Mailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1255168Issue Tracking, Third Party Advisory
https://fedorahosted.org/ipsilon/wiki/Releases/v1.0.1Product
https://pagure.io/ipsilon/a503aa9c2a30a74e709d1c88099befd50fb2eb16Patch
http://www.openwall.com/lists/oss-security/2015/10/23/10Mailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1255168Issue Tracking, Third Party Advisory
https://fedorahosted.org/ipsilon/wiki/Releases/v1.0.1Product
https://pagure.io/ipsilon/a503aa9c2a30a74e709d1c88099befd50fb2eb16Patch

Timeline

Published: Feb 17, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-52166.1The Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly escape certain characters in a Python exception-message t CVE-2015-52174.0providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly check permissions to update t CVE-2015-52182.1Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a cra CVE-2015-52197.5The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which CVE-2015-52205.0The Web Console in Red Hat Enterprise Application Platform (EAP) before 6.4.4 and WildFly (formerly JBoss Application Server) allows remote CVE-2015-52215.5Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allo CVE-2015-52228.5Red Hat OpenShift Enterprise 3.0.0.0 does not properly check permissions, which allows remote authenticated users with build permissions to CVE-2015-52235.0OpenStack Object Storage (Swift) before 2.4.0 allows attackers to obtain sensitive information via a PUT tempurl and a DLO object manifest t CVE-2015-52249.8The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly o CVE-2015-52257.2Buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a de CVE-2015-52278.8The Landing Pages plugin before 1.9.2 for WordPress allows remote attackers to execute arbitrary code via the url parameter.CVE-2015-52287.8The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of e