CVE-2005-0508

Опубликовано: 14 мар. 2005

Источник: nvd

CVSS2: 4.6

EPSS Низкий

Описание

Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhino scripting engine due to a "script security issue."

Ссылки

http://secunia.com/advisories/14336
Patch
Vendor Advisory
http://www.securityfocus.com/bid/12619
Patch
Vendor Advisory
http://xml.apache.org/batik/#SecurityWarning
http://secunia.com/advisories/14336
Patch
Vendor Advisory
http://www.securityfocus.com/bid/12619
Patch
Vendor Advisory
http://xml.apache.org/batik/#SecurityWarning

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:batik:1.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:batik:1.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:batik:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:batik:1.5:*:*:*:*:*:*:*

EPSS

Процентиль: 23%

0.00074

Низкий

4.6 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-0508

ubuntu

больше 20 лет назад

Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhino scripting engine due to a "script security issue."

CVE-2005-0508

debian

больше 20 лет назад

Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attack ...

GHSA-3c37-jjmv-92cc

github

больше 3 лет назад

Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhino scripting engine due to a "script security issue."

EPSS

Процентиль: 23%

0.00074

Низкий

4.6 Medium

CVSS2

Дефекты

NVD-CWE-Other