Lucene search

K
cveMitreCVE-2008-4083
HistorySep 15, 2008 - 5:12 p.m.

CVE-2008-4083

2008-09-1517:12:51
CWE-79
mitre
web.nvd.nist.gov
31
cve-2008-4083
cross-site scripting
xss vulnerability
brim 2.0
bookmarks plugin
remote authenticated
web script
html
additempost action
index.php
nvd

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

44.7%

Cross-site scripting (XSS) vulnerability in the Bookmarks plugin in Brim 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in an addItemPost action to index.php. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd
Node
brim-projectbrimMatch2.0.0
VendorProductVersionCPE
brim-projectbrim2.0.0cpe:2.3:a:brim-project:brim:2.0.0:*:*:*:*:*:*:*

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

44.7%

Related for CVE-2008-4083