CVE-2004-1544

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Search.jsp in JSPWiki 2.1.120-cvs and earlier allows remote attackers to execute arbitrary web script as other users via the query parameter.

Ссылки

http://marc.info/?l=bugtraq&m=110135663220831&w=2
http://secunia.com/advisories/13285/
Patch
Vendor Advisory
http://www.securityfocus.com/bid/11746
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/18236
http://marc.info/?l=bugtraq&m=110135663220831&w=2
http://secunia.com/advisories/13285/
Patch
Vendor Advisory
http://www.securityfocus.com/bid/11746
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/18236

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:jspwiki:jspwiki:2.1.120:*:*:*:*:*:*:*

cpe:2.3:a:jspwiki:jspwiki:2.1.121:*:*:*:*:*:*:*

cpe:2.3:a:jspwiki:jspwiki:2.1.122:*:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.00409

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-1544

debian

больше 20 лет назад

Cross-site scripting (XSS) vulnerability in Search.jsp in JSPWiki 2.1. ...

GHSA-q7q2-7fcq-6rq6

github

больше 3 лет назад