Lucene search

CertccCVE-2005-2339

HistoryNov 21, 2005 - 11:03 p.m.

CVE-2005-2339

2005-11-2123:03:00

certcc

web.nvd.nist.gov

cve-2005-2339

cross-site scripting

xss

unicode

msearch

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

49.9%

JSON

Cross-site scripting (XSS) vulnerability in the Unicode version of msearch (unicode-msearch) 1.51(U1)-beta1, 1.51(U1), and 1.52(U1) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

Nvd

Node

msearchunicode_msearchMatch1.51_u1

msearchunicode_msearchMatch1.51_u1_beta1

msearchunicode_msearchMatch1.52_u1

VendorProductVersionCPE
msearchunicode_msearch1.51_u1cpe:2.3:a:msearch:unicode_msearch:1.51_u1:*:*:*:*:*:*:*
msearchunicode_msearch1.51_u1_beta1cpe:2.3:a:msearch:unicode_msearch:1.51_u1_beta1:*:*:*:*:*:*:*
msearchunicode_msearch1.52_u1cpe:2.3:a:msearch:unicode_msearch:1.52_u1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
msearch	unicode_msearch	1.51_u1	cpe:2.3:a:msearch:unicode_msearch:1.51_u1:::::::*
msearch	unicode_msearch	1.51_u1_beta1	cpe:2.3:a:msearch:unicode_msearch:1.51_u1_beta1:::::::*
msearch	unicode_msearch	1.52_u1	cpe:2.3:a:msearch:unicode_msearch:1.52_u1:::::::*

References

jvn.jp/jp/JVN%2379925E6F/index.html

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

49.9%

JSON

Related for CVE-2005-2339