CVE-2014-6439

Опубликовано: 10 окт. 2014

Источник: debian

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
elasticsearch	fixed	1.0.3+dfsg-4		package

EPSS

Процентиль: 60%

0.00397

Низкий

Связанные уязвимости

CVE-2014-6439

ubuntu

больше 11 лет назад

Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2014-6439

redhat

больше 11 лет назад

Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2014-6439

nvd

больше 11 лет назад

Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

GHSA-8699-m855-cwqf

github

больше 3 лет назад

Cross-site scripting in Elasticsearch

EPSS

Процентиль: 60%

0.00397

Низкий