Lucene search

DebianCVE-2005-2350

HistoryNov 01, 2019 - 6:15 p.m.

CVE-2005-2350

2019-11-0118:15:11

CWE-79

debian

web.nvd.nist.gov

108

cve

2005

2350

cross-site scripting

xss

vulnerability

websieve

v0.62

remote attackers

web script

html code

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

43.8%

JSON

Cross-site scripting (XSS) vulnerability in websieve v0.62 allows remote attackers to inject arbitrary web script or HTML code in the web user interface.

Affected configurations

Nvd

Node

websieve_projectwebsieveMatch0.62

VendorProductVersionCPE
websieve_projectwebsieve0.62cpe:2.3:a:websieve_project:websieve:0.62:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
websieve_project	websieve	0.62	cpe:2.3:a:websieve_project:websieve:0.62:::::::*

CNA Affected

[
  {
    "product": "websieve",
    "vendor": "websieve",
    "versions": [
      {
        "status": "affected",
        "version": "0.62"
      },
      {
        "status": "affected",
        "version": "fixed in 0.62 patch 2"
      }
    ]
  }
]

References

bugs.debian.org/cgi-bin/bugreport.cgi?bug=311838

security-tracker.debian.org/tracker/CVE-2005-2350

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

43.8%

JSON

Related for CVE-2005-2350