Описание
FreeBSD CVSweb version 2.x contains a Cross Site Scripting (XSS) vulnerability in all pages that can result in limited impact--CVSweb is anonymous & read-only. It might impact other sites on same domain. This attack appears to be exploitable via victim must load specially crafted url. This vulnerability appears to have been fixed in 3.x.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | not-affected | 3:3.0.6-8 |
| devel | not-affected | |
| esm-apps-legacy/xenial | not-affected | 3:3.0.6-8 |
| esm-apps/bionic | not-affected | 3:3.0.6-8 |
| esm-apps/focal | not-affected | |
| esm-apps/jammy | not-affected | |
| esm-apps/xenial | not-affected | 3:3.0.6-8 |
| esm-infra-legacy/trusty | DNE | |
| focal | not-affected | |
| groovy | not-affected |
Показывать по
EPSS
4.3 Medium
CVSS2
6.1 Medium
CVSS3
Связанные уязвимости
FreeBSD CVSweb version 2.x contains a Cross Site Scripting (XSS) vulnerability in all pages that can result in limited impact--CVSweb is anonymous & read-only. It might impact other sites on same domain. This attack appears to be exploitable via victim must load specially crafted url. This vulnerability appears to have been fixed in 3.x.
FreeBSD CVSweb version 2.x contains a Cross Site Scripting (XSS) vulne ...
FreeBSD CVSweb version 2.x contains a Cross Site Scripting (XSS) vulnerability in all pages that can result in limited impact--CVSweb is anonymous & read-only. It might impact other sites on same domain. This attack appears to be exploitable via victim must load specially crafted url. This vulnerability appears to have been fixed in 3.x.
EPSS
4.3 Medium
CVSS2
6.1 Medium
CVSS3