CVE-2014-3926

Опубликовано: 13 мар. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter.

Ссылки

http://blog.talosintelligence.com/2014/09/looking-glasses-with-bacon.html
Third Party Advisory
VDB Entry
https://gist.github.com/bittorrent3389/8fee7cdaa73d1d351ee9
Issue Tracking
Third Party Advisory
https://github.com/Cougar/lg/issues/3
Issue Tracking
Patch
Third Party Advisory
https://hackerone.com/reports/16330
Third Party Advisory
https://tools.cisco.com/security/center/viewAlert.x?alertId=35685
Third Party Advisory
http://blog.talosintelligence.com/2014/09/looking-glasses-with-bacon.html
Third Party Advisory
VDB Entry
https://gist.github.com/bittorrent3389/8fee7cdaa73d1d351ee9
Issue Tracking
Third Party Advisory
https://github.com/Cougar/lg/issues/3
Issue Tracking
Patch
Third Party Advisory
https://hackerone.com/reports/16330
Third Party Advisory
https://tools.cisco.com/security/center/viewAlert.x?alertId=35685
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:lg_project:lg:*:*:*:*:*:*:*:*

Версия до 1.8 (включая)

EPSS

Процентиль: 74%

0.00806

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-97p5-8gw9-g36f