Описание
In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parameter.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| xymon | fixed | 4.3.29-1 | package | |
| xymon | fixed | 4.3.28-5+deb10u1 | buster | package |
| xymon | fixed | 4.3.28-2+deb9u1 | stretch | package |
Примечания
https://lists.xymon.com/archive/2019-July/046570.html
EPSS
Процентиль: 59%
0.00905
Низкий
Связанные уязвимости
CVSS3: 6.1
ubuntu
около 7 лет назад
In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parameter.
CVSS3: 6.1
nvd
около 7 лет назад
In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parameter.
CVSS3: 6.1
github
больше 4 лет назад
In Xymon through 4.3.28, an XSS vulnerability exists in the csvinfo CGI script due to insufficient filtering of the db parameter.
CVSS3: 9.8
altlinux
около 7 лет назад
ALT-PU-2019-2687: package `xymon` update to version 4.3.29-alt1
EPSS
Процентиль: 59%
0.00905
Низкий