Описание
Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-apps/xenial | needs-triage | |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| questing | DNE | |
| upstream | released | 1.0.3+dfsg-4 |
Показывать по
10
Ссылки на источники
4.3 Medium
CVSS2
Связанные уязвимости
redhat
больше 11 лет назад
Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
nvd
больше 11 лет назад
Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
debian
больше 11 лет назад
Cross-site scripting (XSS) vulnerability in the CORS functionality in ...
4.3 Medium
CVSS2