CVE-2008-3023

Опубликовано: 07 июл. 2008

Источник: nvd

CVSS2: 4.3

EPSS Средний

Описание

Cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.6.2 and earlier, and 3.6.3 dev3 and earlier development versions, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2005-1799.

Ссылки

http://fswiki.org/wiki.pl?page=%CD%FA%CE%F2%2F2008-7-3
http://jvn.jp/en/jp/JVN77432756/index.html
Third Party Advisory
http://jvn.jp/jp/JVN77432756/index.html
Third Party Advisory
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000036.html
Third Party Advisory
VDB Entry
http://secunia.com/advisories/30923
Vendor Advisory
http://www.securityfocus.com/bid/30071
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/43574
Third Party Advisory
VDB Entry
http://fswiki.org/wiki.pl?page=%CD%FA%CE%F2%2F2008-7-3
http://jvn.jp/en/jp/JVN77432756/index.html
Third Party Advisory
http://jvn.jp/jp/JVN77432756/index.html
Third Party Advisory
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000036.html
Third Party Advisory
VDB Entry
http://secunia.com/advisories/30923
Vendor Advisory
http://www.securityfocus.com/bid/30071
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/43574
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:fswiki:freestyle_wiki:*:*:*:*:*:*:*:*

Версия до 3.6.2 (включая)

cpe:2.3:a:fswiki:freestyle_wiki:*:dev3:*:*:*:*:*:*

Версия до 3.6.3 (включая)

cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.2363

Средний

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-h3mw-q2vh-qc2j

github

почти 4 года назад