ΠΠΏΡΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ: 31 ΠΌΠ°Ρ 2011
ΠΡΡΠΎΡΠ½ΠΈΠΊ: redhat
CVSS2: 4.3
EPSS ΠΠΈΠ·ΠΊΠΈΠΉ
ΠΠΏΠΈΡΠ°Π½ΠΈΠ΅
Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
ΠΠ°ΡΡΠΎΠ½ΡΡΡΠ΅ ΠΏΠ°ΠΊΠ΅ΡΡ
| ΠΠ»Π°ΡΡΠΎΡΠΌΠ° | ΠΠ°ΠΊΠ΅Ρ | Π‘ΠΎΡΡΠΎΡΠ½ΠΈΠ΅ | Π Π΅ΠΊΠΎΠΌΠ΅Π½Π΄Π°ΡΠΈΡ | Π Π΅Π»ΠΈΠ· |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | conga | Affected | ||
| Red Hat Enterprise Linux 5 | conga | Fixed | RHSA-2012:0151 | 21.02.2012 |
ΠΠΎΠΊΠ°Π·ΡΠ²Π°ΡΡ ΠΏΠΎ
10
Π‘ΡΡΠ»ΠΊΠΈ Π½Π° ΠΈΡΡΠΎΡΠ½ΠΈΠΊΠΈ
ΠΠΎΠΏΠΎΠ»Π½ΠΈΡΠ΅Π»ΡΠ½Π°Ρ ΠΈΠ½ΡΠΎΡΠΌΠ°ΡΠΈΡ
Π‘ΡΠ°ΡΡΡ:
Moderate
ΠΠ΅ΡΠ΅ΠΊΡ:
CWE-79
https://bugzilla.redhat.com/show_bug.cgi?id=711494plone: A reflected cross site scripting vulnerability
EPSS
ΠΡΠΎΡΠ΅Π½ΡΠΈΠ»Ρ: 83%
0.02389
ΠΠΈΠ·ΠΊΠΈΠΉ
4.3 Medium
CVSS2
Π‘Π²ΡΠ·Π°Π½Π½ΡΠ΅ ΡΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ
ubuntu
Π±ΠΎΠ»ΡΡΠ΅ 15 Π»Π΅Ρ Π½Π°Π·Π°Π΄
Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
nvd
Π±ΠΎΠ»ΡΡΠ΅ 15 Π»Π΅Ρ Π½Π°Π·Π°Π΄
Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
debian
Π±ΠΎΠ»ΡΡΠ΅ 15 Π»Π΅Ρ Π½Π°Π·Π°Π΄
Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allo ...
CVSS3: 6.1
github
ΠΎΠΊΠΎΠ»ΠΎ 8 Π»Π΅Ρ Π½Π°Π·Π°Π΄
Cross-site scripting in Products.CMFPlone and Products.PasswordResetTool
oracle-oval
Π±ΠΎΠ»ΡΡΠ΅ 14 Π»Π΅Ρ Π½Π°Π·Π°Π΄
ELSA-2012-0151: conga security, bug fix, and enhancement update (MODERATE)
EPSS
ΠΡΠΎΡΠ΅Π½ΡΠΈΠ»Ρ: 83%
0.02389
ΠΠΈΠ·ΠΊΠΈΠΉ
4.3 Medium
CVSS2