Описание
Cross-site scripting (XSS) vulnerability in templatefunctions.py in Loggerhead before 1.18.1 allows remote authenticated users to inject arbitrary web script or HTML via a filename, which is not properly handled in a revision view.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | not-affected | 1.18.1-1 |
| hardy | DNE | |
| karmic | released | 1.17-0ubuntu1.1 |
| lucid | released | 1.17+bzr400-1ubuntu0.1 |
| maverick | released | 1.17+bzr424-1ubuntu1.1 |
| upstream | released | 1.8.1 |
Показывать по
10
Ссылки на источники
3.5 Low
CVSS2
Связанные уязвимости
nvd
больше 14 лет назад
Cross-site scripting (XSS) vulnerability in templatefunctions.py in Loggerhead before 1.18.1 allows remote authenticated users to inject arbitrary web script or HTML via a filename, which is not properly handled in a revision view.
debian
больше 14 лет назад
Cross-site scripting (XSS) vulnerability in templatefunctions.py in Lo ...
3.5 Low
CVSS2