Lucene search
HistorySep 01, 2004 - 4:00 a.m.
CVE-2001-1352
cve-2001-1352
cross-site scripting
xss
namazu
remote attack
javascript
nvd
7.4 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.012 Low
EPSS
Percentile
85.5%
Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users via an error message that is returned when an invalid index file is specified in the idxname parameter.
Affected configurations
Node
namazunamazuRange≤2.0.9
| CPE | Name | Operator | Version |
|---|---|---|---|
| namazu:namazu | namazu | le | 2.0.9 |
7.4 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.012 Low
EPSS
Percentile
85.5%
Related for CVE-2001-1352