CVE-2001-0828

Опубликовано: 06 дек. 2001

Источник: nvd

CVSS2: 5.1

EPSS Низкий

Описание

A cross-site scripting vulnerability in Caucho Technology Resin before 1.2.4 allows a malicious webmaster to embed Javascript in a hyperlink that ends in a .jsp extension, which causes an error message that does not properly quote the Javascript.

Ссылки

http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html
http://www.caucho.com/products/resin/changes.xtp
Vendor Advisory
http://www.kb.cert.org/vuls/id/981651
US Government Resource
http://www.osvdb.org/1890
http://www.securityfocus.com/bid/2981
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6793
http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html
http://www.caucho.com/products/resin/changes.xtp
Vendor Advisory
http://www.kb.cert.org/vuls/id/981651
US Government Resource
http://www.osvdb.org/1890
http://www.securityfocus.com/bid/2981
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6793

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:caucho_technology:resin:*:*:*:*:*:*:*:*

Версия до 1.2.4 (включая)

cpe:2.3:a:caucho_technology:resin:1.2.2:*:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00706

Низкий

5.1 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9v7q-899m-38w5

github

почти 4 года назад