Описание
Cross-site scripting (XSS) vulnerability in Kiwix before 0.9.1, when using kiwix-serve, allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to /search.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | |
| esm-apps/jammy | not-affected | |
| hirsute | not-affected | 2.0.5-3 |
| impish | not-affected | |
| jammy | not-affected | |
| trusty | DNE | |
| upstream | released | 2.0.4-1 |
| xenial | DNE |
Показывать по
Ссылки на источники
EPSS
4.3 Medium
CVSS2
Связанные уязвимости
Cross-site scripting (XSS) vulnerability in Kiwix before 0.9.1, when using kiwix-serve, allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to /search.
Cross-site scripting (XSS) vulnerability in Kiwix before 0.9.1, when u ...
Cross-site scripting (XSS) vulnerability in Kiwix before 0.9.1, when using kiwix-serve, allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to /search.
EPSS
4.3 Medium
CVSS2