CVE-2011-4345

2011-11-3004:05:58

CWE-79

[email protected]

web.nvd.nist.gov

cve-2011-4345

namazu

vulnerability

xss

remote attack

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.0%

JSON

Cross-site scripting (XSS) vulnerability in Namazu before 2.0.21, when Internet Explorer 6 or 7 is used, allows remote attackers to inject arbitrary web script or HTML via a cookie.

Affected configurations

NVD

Node

namazunamazuRange≤2.0.20

namazunamazuMatch2.0

namazunamazuMatch2.0.2

namazunamazuMatch2.0.12

namazunamazuMatch2.0.13

namazunamazuMatch2.0.14

namazunamazuMatch2.0.15

namazunamazuMatch2.0.16

namazunamazuMatch2.0.17

namazunamazuMatch2.0.18

namazunamazuMatch2.0.19

AND

microsoftinternet_explorerMatch6

microsoftinternet_explorerMatch7

CPENameOperatorVersion
namazu:namazunamazule2.0.20
namazu:namazunamazueq2.0
namazu:namazunamazueq2.0.2
namazu:namazunamazueq2.0.12
namazu:namazunamazueq2.0.13
namazu:namazunamazueq2.0.14
namazu:namazunamazueq2.0.15
namazu:namazunamazueq2.0.16
namazu:namazunamazueq2.0.17
namazu:namazunamazueq2.0.18

CPE	Name	Operator	Version
namazu:namazu	namazu	le	2.0.20
namazu:namazu	namazu	eq	2.0
namazu:namazu	namazu	eq	2.0.2
namazu:namazu	namazu	eq	2.0.12
namazu:namazu	namazu	eq	2.0.13
namazu:namazu	namazu	eq	2.0.14
namazu:namazu	namazu	eq	2.0.15
namazu:namazu	namazu	eq	2.0.16
namazu:namazu	namazu	eq	2.0.17
namazu:namazu	namazu	eq	2.0.18