Описание
Cross-site scripting (XSS) vulnerability in Direct Web Remoting (DWR) through 2.0.10 and 3.x through 3.0.RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Satellite 5 | dwr | Affected |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-79
https://bugzilla.redhat.com/show_bug.cgi?id=1164082dwr: cross-site scripting flaw (JVN#52422792)
4.3 Medium
CVSS2
Связанные уязвимости
nvd
больше 11 лет назад
Cross-site scripting (XSS) vulnerability in Direct Web Remoting (DWR) through 2.0.10 and 3.x through 3.0.RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
debian
больше 11 лет назад
Cross-site scripting (XSS) vulnerability in Direct Web Remoting (DWR) ...
github
около 4 лет назад
Improper Neutralization of Input During Web Page Generation in Direct Web Remoting
4.3 Medium
CVSS2