Galileo 0.041
- Released by
- JBERGER
- Version
- Release Date
- 2016-08-14
- Kwalitee
- 146.88
- Core Kwalitee
- 93.75
- LINKS
Galileo 0.041
Security Advisories
CVE-2019-7410
There is stored cross site scripting (XSS) in Galileo CMS v0.042. Remote authenticated users could inject arbitrary web script or HTML via $page_title in /lib/Galileo/files/templates/page/show.html.ep (aka the PAGE TITLE Field).
- https://metamorfosec.com/Files/Commits/METC-2020-002-Escape_banner_in_Galileo_CMS_v0.042.txt
- https://github.com/jberger/Galileo/pull/55/files
- https://metamorfosec.com/Files/Advisories/METS-2020-002-A_Stored_XSS_Vulnerability_in_Galileo_CMS_v0.042.txt
Fixed version: >=0.043
Severity: medium
Reported: 2020-08-14
Kwalitee Issues
- has_readme
-
Add a README to the distribution. It should contain a quick description of your module and how to install it.
- use_strict
-
Add 'use strict' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules are strictly written.
Error: Galileo::DB::Schema, Galileo::DB::Schema::Result::Menu, Galileo::DB::Schema::Result::Page, Galileo::DB::Schema::Result::User
- use_warnings
-
Add 'use warnings' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules warn when something bad happens.
Error: Galileo::DB::Schema, Galileo::DB::Schema::Result::Menu, Galileo::DB::Schema::Result::Page, Galileo::DB::Schema::Result::User
- consistent_version
-
Split the distribution, or fix the version numbers to make them consistent (use the highest version number to avoid version downgrade).
Error: 0.041,2
- has_separate_license_file
-
This is not a critical issue. Currently mainly informative for the CPANTS authors. It might be removed later.
Modules
| Name | Abstract | Version | View |
|---|---|---|---|
| Galileo | A simple modern CMS built on Mojolicious | 0.041 | metacpan |
| Galileo::Admin | metacpan | ||
| Galileo::Command::dump | metacpan | ||
| Galileo::Command::setup | metacpan | ||
| Galileo::DB::Deploy | metacpan | ||
| Galileo::DB::Schema | 2 | metacpan | |
| Galileo::DB::Schema::Result::Menu | metacpan | ||
| Galileo::DB::Schema::Result::Page | metacpan | ||
| Galileo::DB::Schema::Result::User | metacpan | ||
| Galileo::File | metacpan | ||
| Galileo::Menu | metacpan | ||
| Galileo::Page | metacpan | ||
| Galileo::Plugin::Deploy | metacpan | ||
| Galileo::Plugin::Modal | metacpan | ||
| Galileo::User | metacpan |