CVE-2022-46391

Опубликовано: 04 дек. 2022

Источник: debian

EPSS Низкий

Описание

AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks.

Пакет	Статус	Версия исправления	Релиз	Тип
awstats	fixed	7.8-3		package
awstats	fixed	7.8-2+deb11u1	bullseye	package

https://github.com/eldy/AWStats/pull/226
Fixed by: https://github.com/eldy/AWStats/commit/38682330e1ec3f3af95f9436640358b2d9e4a965

EPSS

Процентиль: 57%

0.00349

Низкий

CVE-2022-46391

CVSS3: 6.1

ubuntu

около 3 лет назад

AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks.

CVE-2022-46391

CVSS3: 6.1

nvd

около 3 лет назад

AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks.

GHSA-j6xf-hwqw-qjg4

CVSS3: 6.1

github

около 3 лет назад

AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks.

EPSS

Процентиль: 57%

0.00349

Низкий