CVE-2016-9681

Опубликовано: 25 дек. 2016

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Serendipity before 2.0.5 allow remote authenticated users to inject arbitrary web script or HTML via a category or directory name.

Ссылки

http://www.securityfocus.com/bid/95095
Third Party Advisory
VDB Entry
https://github.com/s9y/Serendipity/commit/e2a665e13b7de82a71c9bbb77575d15131b722be
Patch
Vendor Advisory
https://smarterbitbybit.com/cve-2016-9681-serendipity-cms-xss-vulnerability-in-version-2-0-4/
Exploit
Technical Description
Third Party Advisory
http://www.securityfocus.com/bid/95095
Third Party Advisory
VDB Entry
https://github.com/s9y/Serendipity/commit/e2a665e13b7de82a71c9bbb77575d15131b722be
Patch
Vendor Advisory
https://smarterbitbybit.com/cve-2016-9681-serendipity-cms-xss-vulnerability-in-version-2-0-4/
Exploit
Technical Description
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:s9y:serendipity:*:*:*:*:*:*:*:*

Версия до 2.0.4 (включая)

EPSS

Процентиль: 46%

0.00235

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2016-9681

CVSS3: 5.4

ubuntu

около 9 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Serendipity before 2.0.5 allow remote authenticated users to inject arbitrary web script or HTML via a category or directory name.

CVE-2016-9681

CVSS3: 5.4

debian

около 9 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Serendipity bef ...

GHSA-37rg-pmjm-jjg7

CVSS3: 5.4

github

больше 3 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Serendipity before 2.0.5 allow remote authenticated users to inject arbitrary web script or HTML via a category or directory name.

EPSS

Процентиль: 46%

0.00235

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79