Lucene search

[email protected]CVE-2008-5720

HistoryDec 26, 2008 - 5:30 p.m.

CVE-2008-5720

2008-12-2617:30:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2008-5720

cross-site scripting

xss

mayaa

security vulnerability

web script injection

html injection

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.4%

JSON

Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions.

Affected configurations

NVD

Node

seasarmayaaRange≤1.1.22

seasarmayaaMatch0.1.0

seasarmayaaMatch0.1.0f

seasarmayaaMatch0.1.1

seasarmayaaMatch0.1.2

seasarmayaaMatch0.1.3

seasarmayaaMatch0.2.0

seasarmayaaMatch0.3.0

seasarmayaaMatch0.4.0

seasarmayaaMatch0.9.0

seasarmayaaMatch0.9.1

seasarmayaaMatch0.9.2

seasarmayaaMatch0.9.3

seasarmayaaMatch0.9.4

seasarmayaaMatch0.9.5

seasarmayaaMatch0.9.6

seasarmayaaMatch0.9.7

seasarmayaaMatch0.9.7.1

seasarmayaaMatch0.9.8

seasarmayaaMatch0.9.9

seasarmayaaMatch0.9.10

seasarmayaaMatch0.9.11

seasarmayaaMatch0.9.12

seasarmayaaMatch0.9.13

seasarmayaaMatch0.9.14

seasarmayaaMatch0.9.15

seasarmayaaMatch0.9.16

seasarmayaaMatch0.9.17

seasarmayaaMatch0.9.18

seasarmayaaMatch0.9.19

seasarmayaaMatch0.9.20

seasarmayaaMatch0.9.20a

seasarmayaaMatch1.0.0

seasarmayaaMatch1.0.0beta1

seasarmayaaMatch1.0.0beta2

seasarmayaaMatch1.0.0beta3

seasarmayaaMatch1.0.0rc1

seasarmayaaMatch1.0.1

seasarmayaaMatch1.0.2

seasarmayaaMatch1.0.3

seasarmayaaMatch1.1.0

seasarmayaaMatch1.1.0beta1

seasarmayaaMatch1.1.0beta2

seasarmayaaMatch1.1.0beta3

seasarmayaaMatch1.1.0beta4

seasarmayaaMatch1.1.0beta5

seasarmayaaMatch1.1.0beta6

seasarmayaaMatch1.1.1

seasarmayaaMatch1.1.2

seasarmayaaMatch1.1.3

seasarmayaaMatch1.1.4

seasarmayaaMatch1.1.5

seasarmayaaMatch1.1.6

seasarmayaaMatch1.1.7

seasarmayaaMatch1.1.8

seasarmayaaMatch1.1.9

seasarmayaaMatch1.1.10

seasarmayaaMatch1.1.11

seasarmayaaMatch1.1.12

seasarmayaaMatch1.1.13

seasarmayaaMatch1.1.14

seasarmayaaMatch1.1.15

seasarmayaaMatch1.1.16

seasarmayaaMatch1.1.17

seasarmayaaMatch1.1.18

seasarmayaaMatch1.1.19

seasarmayaaMatch1.1.20

seasarmayaaMatch1.1.21

CPENameOperatorVersion
seasar:mayaaseasar mayaale1.1.22
seasar:mayaaseasar mayaaeq0.1.0
seasar:mayaaseasar mayaaeq0.1.0f
seasar:mayaaseasar mayaaeq0.1.1
seasar:mayaaseasar mayaaeq0.1.2
seasar:mayaaseasar mayaaeq0.1.3
seasar:mayaaseasar mayaaeq0.2.0
seasar:mayaaseasar mayaaeq0.3.0
seasar:mayaaseasar mayaaeq0.4.0
seasar:mayaaseasar mayaaeq0.9.0

CPE	Name	Operator	Version
seasar:mayaa	seasar mayaa	le	1.1.22
seasar:mayaa	seasar mayaa	eq	0.1.0
seasar:mayaa	seasar mayaa	eq	0.1.0f
seasar:mayaa	seasar mayaa	eq	0.1.1
seasar:mayaa	seasar mayaa	eq	0.1.2
seasar:mayaa	seasar mayaa	eq	0.1.3
seasar:mayaa	seasar mayaa	eq	0.2.0
seasar:mayaa	seasar mayaa	eq	0.3.0
seasar:mayaa	seasar mayaa	eq	0.4.0
seasar:mayaa	seasar mayaa	eq	0.9.0