Lucene search

VulDBCVE-2014-125035

HistoryJan 02, 2023 - 4:15 p.m.

CVE-2014-125035

2023-01-0216:15:10

CWE-79

VulDB

web.nvd.nist.gov

cve-2014-125035

vulnerability

jobs-plugin

cross site scripting

remote attack

patch

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

34.3%

JSON

A vulnerability classified as problematic was found in Jobs-Plugin. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. The identifier of the patch is b8a56718b1d42834c6ec51d9c489c5dc20471d7b. It is recommended to apply a patch to fix this issue. The identifier VDB-217189 was assigned to this vulnerability.

Affected configurations

Nvd

Node

jobs-plugin_projectjobs-pluginRange<2014-12-01

VendorProductVersionCPE
jobs-plugin_projectjobs-plugin*cpe:2.3:a:jobs-plugin_project:jobs-plugin:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
jobs-plugin_project	jobs-plugin	*	cpe:2.3:a:jobs-plugin_project:jobs-plugin::::::::

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Jobs-Plugin",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

References

github.com/mrbobbybryant/Jobs-Plugin/commit/b8a56718b1d42834c6ec51d9c489c5dc20471d7b

github.com/mrbobbybryant/Jobs-Plugin/pull/2

vuldb.com/?ctiid.217189

vuldb.com/?id.217189

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

34.3%

JSON

Related for CVE-2014-125035