CVE-2005-0508

Опубликовано: 14 мар. 2005

Источник: nvd

CVSS2: 4.6

EPSS Низкий

Описание

Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhino scripting engine due to a "script security issue."

Ссылки

http://secunia.com/advisories/14336
Patch
Vendor Advisory
http://www.securityfocus.com/bid/12619
Patch
Vendor Advisory
http://xml.apache.org/batik/#SecurityWarning
http://secunia.com/advisories/14336
Patch
Vendor Advisory
http://www.securityfocus.com/bid/12619
Patch
Vendor Advisory
http://xml.apache.org/batik/#SecurityWarning

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:batik:1.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:batik:1.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:batik:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:batik:1.5:*:*:*:*:*:*:*

EPSS

Процентиль: 22%

0.00074

Низкий

4.6 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-0508

ubuntu

почти 21 год назад

Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhino scripting engine due to a "script security issue."

CVE-2005-0508

debian

почти 21 год назад

Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attack ...

GHSA-3c37-jjmv-92cc

github

почти 4 года назад

Unknown vulnerability in Squiggle for Batik before 1.5.1 allows attackers to bypass certain access controls via certain features of the Rhino scripting engine due to a "script security issue."

EPSS

Процентиль: 22%

0.00074

Низкий

4.6 Medium

CVSS2

Дефекты

NVD-CWE-Other