CVE-2011-0533

Опубликовано: 17 фев. 2011

Источник: nvd

CVSS2: 4.3

EPSS Средний

Описание

Cross-site scripting (XSS) vulnerability in Apache Continuum 1.1 through 1.2.3.1, 1.3.6, and 1.4.0 Beta; and Archiva 1.3.0 through 1.3.3 and 1.0 through 1.22 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to the autoIncludeParameters setting for the extremecomponents table.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:continuum:1.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:continuum:1.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:continuum:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:continuum:1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:continuum:1.2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:continuum:1.3.6:*:*:*:*:*:*:*

cpe:2.3:a:apache:continuum:1.4.0:beta:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:apache:archiva:1.0:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.1.4:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.3:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.3.1:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.3.2:*:*:*:*:*:*:*

cpe:2.3:a:apache:archiva:1.3.3:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.12757

Средний

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-7382-fv7p-v9v3

github

больше 3 лет назад

Apache Continuum and Archiva vulnerable to Cross-site Scripting