exploitDog

CVE-2010-2032

Опубликовано: 24 мая 2010

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in resin-admin/digest.php in Caucho Technology Resin Professional 3.1.5, 3.1.10, 4.0.6, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the (1) digest_realm or (2) digest_username parameters. NOTE: some of these details are obtained from third party information.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:caucho:resin:3.1.5:-:pro:*:*:*:*:*

cpe:2.3:a:caucho:resin:3.1.10:-:pro:*:*:*:*:*

cpe:2.3:a:caucho:resin:4.0.6:-:pro:*:*:*:*:*

EPSS

Процентиль: 84%

0.0225

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-7r96-6597-rqx6

github

больше 3 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in resin-admin/digest.php in Caucho Technology Resin Professional 3.1.5, 3.1.10, 4.0.6, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the (1) digest_realm or (2) digest_username parameters. NOTE: some of these details are obtained from third party information.

EPSS

Процентиль: 84%

0.0225

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79