Lucene search

K
cve[email protected]CVE-2008-5647
HistoryDec 17, 2008 - 6:30 p.m.

CVE-2008-5647

2008-12-1718:30:01
web.nvd.nist.gov
22
cve-2008-5647
html sanitizer
trac
phishing attacks
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.1 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.8%

Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors.

Affected configurations

NVD
Node
tractrac
OR
tractracRange0.11.2.1
OR
tractracMatch0.5
OR
tractracMatch0.5.1
OR
tractracMatch0.5.2
OR
tractracMatch0.6
OR
tractracMatch0.6.1
OR
tractracMatch0.7
OR
tractracMatch0.7.1
OR
tractracMatch0.8
OR
tractracMatch0.8.1
OR
tractracMatch0.8.2
OR
tractracMatch0.8.3
OR
tractracMatch0.8.4
OR
tractracMatch0.9
OR
tractracMatch0.9b1
OR
tractracMatch0.9b2
OR
tractracMatch0.9.1
OR
tractracMatch0.9.2
OR
tractracMatch0.9.3
OR
tractracMatch0.9.4
OR
tractracMatch0.9.5
OR
tractracMatch0.9.6
OR
tractracMatch0.10
OR
tractracMatch0.10.1
OR
tractracMatch0.10.2
OR
tractracMatch0.10.3
OR
tractracMatch0.10.3.1
OR
tractracMatch0.10.4
OR
tractracMatch0.10.5
OR
tractracMatch0.11
OR
tractracMatch0.11.2

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

6.1 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.8%