Lucene search
HistoryMar 15, 2002 - 5:00 a.m.
CVE-2001-1202
cve-2001-1202
cross-site scripting
xss
delegate 7.7.0
delegate 7.7.1
javascript execution
403 forbidden error.
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
High
0.031 Low
EPSS
Percentile
91.1%
Cross-site scripting vulnerability in DeleGate 7.7.0 and 7.7.1 does not quote scripting commands within a “403 Forbidden” error page, which allows remote attackers to execute arbitrary Javascript on other clients via a URL that generates an error.
Affected configurations
Node
delegatedelegateMatch7.7.0
ORdelegatedelegateMatch7.7.1
ORdelegatedelegateMatch7.8.0
ORdelegatedelegateMatch7.8.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| delegate:delegate | delegate | eq | 7.7.0 |
| delegate:delegate | delegate | eq | 7.7.1 |
| delegate:delegate | delegate | eq | 7.8.0 |
| delegate:delegate | delegate | eq | 7.8.1 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
High
0.031 Low
EPSS
Percentile
91.1%
Related for CVE-2001-1202