Описание
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libxml2 | fixed | 2.9.12+dfsg-3 | package | |
| libxml2 | no-dsa | buster | package |
Примечания
https://mail.gnome.org/archives/xml/2018-January/msg00010.html
https://bugzilla.gnome.org/show_bug.cgi?id=769760
Introduced by: https://github.com/GNOME/libxml2/commit/960f0e275616cadc29671a218d7fb9b69eb35588 (v2.9.2-rc1)c
Fixed by: https://github.com/GNOME/libxml2/commit/c1ba6f54d32b707ca6d91cb3257ce9de82876b6f (v2.9.11)
EPSS
Процентиль: 28%
0.00098
Низкий
Связанные уязвимости
CVSS3: 6.1
ubuntu
почти 3 года назад
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
CVSS3: 6.1
redhat
почти 9 лет назад
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
CVSS3: 6.1
nvd
почти 3 года назад
Possible cross-site scripting vulnerability in libxml after commit 960f0e2.
EPSS
Процентиль: 28%
0.00098
Низкий