Описание
Cross-site scripting (XSS) vulnerability in the waterfall web status view (status/web/waterfall.py) in Buildbot 0.7.6 through 0.7.11p1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Ссылки
- Patch
- Vendor Advisory
- Vendor Advisory
- Patch
- Patch
- PatchVendor Advisory
- Patch
- Patch
- Patch
- Vendor Advisory
- Vendor Advisory
- Patch
- Patch
- PatchVendor Advisory
- Patch
- Patch
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:buildbot:buildbot:0.7.6:*:*:*:*:*:*:*
cpe:2.3:a:buildbot:buildbot:0.7.7:*:*:*:*:*:*:*
cpe:2.3:a:buildbot:buildbot:0.7.8:*:*:*:*:*:*:*
cpe:2.3:a:buildbot:buildbot:0.7.9:*:*:*:*:*:*:*
cpe:2.3:a:buildbot:buildbot:0.7.10:*:*:*:*:*:*:*
cpe:2.3:a:buildbot:buildbot:0.7.10p1:*:*:*:*:*:*:*
cpe:2.3:a:buildbot:buildbot:0.7.11:*:*:*:*:*:*:*
cpe:2.3:a:buildbot:buildbot:0.7.11p1:*:*:*:*:*:*:*
EPSS
Процентиль: 64%
0.00467
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-79
Связанные уязвимости
ubuntu
больше 16 лет назад
Cross-site scripting (XSS) vulnerability in the waterfall web status view (status/web/waterfall.py) in Buildbot 0.7.6 through 0.7.11p1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
debian
больше 16 лет назад
Cross-site scripting (XSS) vulnerability in the waterfall web status v ...
CVSS3: 6.1
github
больше 3 лет назад
Buildbot Cross-site scripting (XSS) vulnerability
EPSS
Процентиль: 64%
0.00467
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-79