Описание
Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | released | 3.1.6-11.1ubuntu1 |
| devel | released | 3.1.6-11.1ubuntu1 |
| edgy | released | 3.1.6-11.1ubuntu1 |
| feisty | released | 3.1.6-11.1ubuntu1 |
| upstream | needs-triage |
Показывать по
Ссылки на источники
EPSS
6.8 Medium
CVSS2
Связанные уязвимости
Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.
Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.
Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3. ...
Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.
EPSS
6.8 Medium
CVSS2