Lucene search

[email protected]CVE-2014-4719

HistoryOct 03, 2022 - 4:20 p.m.

CVE-2014-4719

2022-10-0316:20:44

CWE-79

[email protected]

web.nvd.nist.gov

cve-2014-4719

xss

user-friendly svn

web script

html

vulnerability

security

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

JSON

Cross-site scripting (XSS) vulnerability in the login panel (svn/login/) in User-Friendly SVN (aka USVN) before 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the username field.

Affected configurations

NVD

Node

usvnuser-friendly_svnRange≤1.0.5

usvnuser-friendly_svnMatch0.6

usvnuser-friendly_svnMatch0.6.1

usvnuser-friendly_svnMatch0.6.2

usvnuser-friendly_svnMatch0.6.3

usvnuser-friendly_svnMatch0.6.4

usvnuser-friendly_svnMatch0.6.5

usvnuser-friendly_svnMatch0.7

usvnuser-friendly_svnMatch0.7.1

usvnuser-friendly_svnMatch0.7.2

usvnuser-friendly_svnMatch1.0.0

usvnuser-friendly_svnMatch1.0.1

usvnuser-friendly_svnMatch1.0.2

usvnuser-friendly_svnMatch1.0.3

usvnuser-friendly_svnMatch1.0.4

CPENameOperatorVersion
usvn:user-friendly_svnusvn user-friendly svnle1.0.5
usvn:user-friendly_svnusvn user-friendly svneq0.6
usvn:user-friendly_svnusvn user-friendly svneq0.6.1
usvn:user-friendly_svnusvn user-friendly svneq0.6.2
usvn:user-friendly_svnusvn user-friendly svneq0.6.3
usvn:user-friendly_svnusvn user-friendly svneq0.6.4
usvn:user-friendly_svnusvn user-friendly svneq0.6.5
usvn:user-friendly_svnusvn user-friendly svneq0.7
usvn:user-friendly_svnusvn user-friendly svneq0.7.1
usvn:user-friendly_svnusvn user-friendly svneq0.7.2

CPE	Name	Operator	Version
usvn:user-friendly_svn	usvn user-friendly svn	le	1.0.5
usvn:user-friendly_svn	usvn user-friendly svn	eq	0.6
usvn:user-friendly_svn	usvn user-friendly svn	eq	0.6.1
usvn:user-friendly_svn	usvn user-friendly svn	eq	0.6.2
usvn:user-friendly_svn	usvn user-friendly svn	eq	0.6.3
usvn:user-friendly_svn	usvn user-friendly svn	eq	0.6.4
usvn:user-friendly_svn	usvn user-friendly svn	eq	0.6.5
usvn:user-friendly_svn	usvn user-friendly svn	eq	0.7
usvn:user-friendly_svn	usvn user-friendly svn	eq	0.7.1
usvn:user-friendly_svn	usvn user-friendly svn	eq	0.7.2

Rows per page:

1-10 of 151

References

packetstormsecurity.com/files/127177/User-Friendly-SVN-Cross-Site-Scripting.html

www.securityfocus.com/bid/68155

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

JSON

Related for CVE-2014-4719

cvelist1 openvas1 nvd1 prion1