CVE-2016-10513

Опубликовано: 10 окт. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Cross Site Scripting (XSS) exists in Piwigo before 2.8.3 via a crafted search expression to include/functions_search.inc.php.

Ссылки

http://piwigo.org/releases/2.8.3
Release Notes
Vendor Advisory
https://github.com/Piwigo/Piwigo/commit/9a93d1f44b06605af84520509e7a0e8b64ab0c05
Patch
Third Party Advisory
https://github.com/Piwigo/Piwigo/issues/548
Issue Tracking
Third Party Advisory
http://piwigo.org/releases/2.8.3
Release Notes
Vendor Advisory
https://github.com/Piwigo/Piwigo/commit/9a93d1f44b06605af84520509e7a0e8b64ab0c05
Patch
Third Party Advisory
https://github.com/Piwigo/Piwigo/issues/548
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*

Версия до 2.8.2 (включая)

EPSS

Процентиль: 57%

0.00884

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2016-10513

CVSS3: 6.1

ubuntu

почти 9 лет назад

Cross Site Scripting (XSS) exists in Piwigo before 2.8.3 via a crafted search expression to include/functions_search.inc.php.

CVE-2016-10513

CVSS3: 6.1

debian

почти 9 лет назад

Cross Site Scripting (XSS) exists in Piwigo before 2.8.3 via a crafted ...

GHSA-5r63-47vh-wqp6

CVSS3: 6.1

github

больше 4 лет назад

Cross Site Scripting (XSS) exists in Piwigo before 2.8.3 via a crafted search expression to include/functions_search.inc.php.

EPSS

Процентиль: 57%

0.00884

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79