Описание
Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-apps-legacy/xenial | needs-triage | |
| esm-apps/xenial | ignored | end of ESM support, was needs-triage |
| jammy | DNE | |
| noble | DNE | |
| plucky | DNE | |
| questing | DNE | |
| resolute | DNE | |
| upstream | released | 1.0.3+dfsg-4 |
Показывать по
10
Ссылки на источники
EPSS
Процентиль: 79%
0.02023
Низкий
4.3 Medium
CVSS2
Связанные уязвимости
redhat
почти 12 лет назад
Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
nvd
почти 12 лет назад
Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
debian
почти 12 лет назад
Cross-site scripting (XSS) vulnerability in the CORS functionality in ...
EPSS
Процентиль: 79%
0.02023
Низкий
4.3 Medium
CVSS2