Описание
Multiple cross-site scripting (XSS) vulnerabilities in Horde Turba H3 2.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the address book and (2) contact data.
Уязвимые конфигурации
Конфигурация 1Версия до 2.0.4 (включая)
Одно из
cpe:2.3:a:horde:turba_h3:*:*:*:*:*:*:*:*
cpe:2.3:a:horde:turba_h3:2.0:*:*:*:*:*:*:*
cpe:2.3:a:horde:turba_h3:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:horde:turba_h3:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:horde:turba_h3:2.0.3:*:*:*:*:*:*:*
EPSS
Процентиль: 56%
0.00335
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
ubuntu
больше 19 лет назад
Multiple cross-site scripting (XSS) vulnerabilities in Horde Turba H3 2.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the address book and (2) contact data.
debian
больше 19 лет назад
Multiple cross-site scripting (XSS) vulnerabilities in Horde Turba H3 ...
github
больше 3 лет назад
Multiple cross-site scripting (XSS) vulnerabilities in Horde Turba H3 2.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the address book and (2) contact data.
EPSS
Процентиль: 56%
0.00335
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other