exploitDog

GHSA-w8p3-8q92-jhhj

Опубликовано: 01 мая 2022

Источник: github

Github: Не прошло ревью

Описание

IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .xsl file with a trailing . (dot).

IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .xsl file with a trailing . (dot).

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2005-0837
https://exchange.xforce.ibmcloud.com/vulnerabilities/19760
http://secunia.com/advisories/14644
http://securitytracker.com/id?1013475
http://www.securityfocus.com/archive/1/393705
http://www.securityfocus.com/bid/12849

EPSS

Процентиль: 83%

0.0245

Низкий

CVE ID

Связанные уязвимости

CVE-2005-0837

ubuntu

около 21 года назад

IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .xsl file with a trailing . (dot).

CVE-2005-0837

nvd

около 21 года назад

IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .xsl file with a trailing . (dot).

CVE-2005-0837

debian

около 21 года назад

IceCast 2.20 allows remote attackers to bypass the XSL parser and obta ...

EPSS

Процентиль: 83%

0.0245

Низкий

CVE ID