Lucene search
HistoryAug 12, 2008 - 5:41 p.m.
CVE-2008-3596
cve-2008-3596
cross-site scripting
xss
vulnerability
harmoni
web security
html
remote attackers
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.4%
Cross-site scripting (XSS) vulnerability in Harmoni before 1.4.7 allows remote attackers to inject arbitrary web script or HTML via the Username field, which is inserted into logs that could be rendered when viewed by an administrator.
Affected configurations
Node
harmoniharmoniRange≤1.4.6
ORharmoniharmoniMatch0.0.2beta
ORharmoniharmoniMatch0.0.3beta
ORharmoniharmoniMatch0.0.4
ORharmoniharmoniMatch0.0.5
ORharmoniharmoniMatch0.1.0
ORharmoniharmoniMatch0.2.0
ORharmoniharmoniMatch0.3.0
ORharmoniharmoniMatch0.3.1
ORharmoniharmoniMatch0.3.2
ORharmoniharmoniMatch0.5.1
ORharmoniharmoniMatch0.6.0
ORharmoniharmoniMatch0.6.2
ORharmoniharmoniMatch0.7.0
ORharmoniharmoniMatch0.7.1
ORharmoniharmoniMatch0.7.2
ORharmoniharmoniMatch0.7.6
ORharmoniharmoniMatch0.7.7
ORharmoniharmoniMatch0.9.0
ORharmoniharmoniMatch0.10.1
ORharmoniharmoniMatch0.11.0
ORharmoniharmoniMatch0.12.0
ORharmoniharmoniMatch0.12.1
ORharmoniharmoniMatch0.12.3
ORharmoniharmoniMatch0.13.0
ORharmoniharmoniMatch0.13.1
ORharmoniharmoniMatch0.13.2
ORharmoniharmoniMatch0.13.3
ORharmoniharmoniMatch0.13.4
ORharmoniharmoniMatch0.13.5
ORharmoniharmoniMatch0.13.6
ORharmoniharmoniMatch0.13.7
ORharmoniharmoniMatch1.0.0
ORharmoniharmoniMatch1.0.1
ORharmoniharmoniMatch1.0.2
ORharmoniharmoniMatch1.0.3
ORharmoniharmoniMatch1.0.5
ORharmoniharmoniMatch1.0.6
ORharmoniharmoniMatch1.1.0
ORharmoniharmoniMatch1.3.0
ORharmoniharmoniMatch1.3.2
ORharmoniharmoniMatch1.3.4
ORharmoniharmoniMatch1.3.5
ORharmoniharmoniMatch1.4.2
Related
cvelist
cvelist
CVE-2008-3596
2008-08-12 17:00:00
prion
prion
Cross site scripting
2008-08-12 17:41:00
nvd
nvd
CVE-2008-3596
2008-08-12 17:41:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.4%
Related for CVE-2008-3596