CVE-2015-2793

🗓️ 21 Nov 2019 19:48:14Reported by debianType

cve🔗 web.nvd.nist.gov👁 80 Views🌐 WEB

Cross-site scripting vulnerability in ikiwiki before 3.2015032

Reporter	Title	Published	Views	Family All 20
Circl	CVE-2015-2793	26 Feb 202409:12	–	circl
CNVD	Ikiwiki 'openid_identifier' parameter cross-site scripting vulnerability	2 Jul 201500:00	–	cnvd
Cvelist	CVE-2015-2793	21 Nov 201919:48	–	cvelist
Debian CVE	CVE-2015-2793	21 Nov 201919:48	–	debiancve
EUVD	EUVD-2015-2882	7 Oct 202500:30	–	euvd
F5 Networks	K17112: ikiwiki cross-site scripting via openid_identifier vulnerability CVE-2015-2793	21 Feb 202318:12	–	f5
F5 Networks	SOL17112 - ikiwiki cross-site scripting via openid_identifier vulnerability CVE-2015-2793	12 Aug 201500:00	–	f5
Fedora	[SECURITY] Fedora 20 Update: ikiwiki-3.20150329-1.fc20	3 May 201517:20	–	fedora
Fedora	[SECURITY] Fedora 21 Update: ikiwiki-3.20150329-1.fc21	3 May 201517:20	–	fedora
Fedora	[SECURITY] Fedora 22 Update: ikiwiki-3.20150329-1.fc22	2 May 201518:07	–	fedora

NVD

Node

ikiwiki ikiwikiRange<3.20150329

Node

fedoraproject fedoraMatch20

fedoraproject fedoraMatch21

fedoraproject fedoraMatch22

[
  {
    "product": "ikiwiki",
    "vendor": "ikiwiki",
    "versions": [
      {
        "status": "affected",
        "version": "before 3.20150329"
      }
    ]
  }
]

Source	Link
source	www.source.ikiwiki.branchable.com/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.fedoraproject.org/pipermail/package-announce/2015-May/157023.html
ikiwiki	www.ikiwiki.info/bugs/XSS_Alert...__33____33____33__/
bugs	www.bugs.debian.org/cgi-bin/bugreport.cgi
openwall	www.openwall.com/lists/oss-security/2015/03/31/1
lists	www.lists.fedoraproject.org/pipermail/package-announce/2015-May/157025.html
lists	www.lists.fedoraproject.org/pipermail/package-announce/2015-May/157001.html
openwall	www.openwall.com/lists/oss-security/2015/03/30/5

Parameter	Position	Path	Description	CWE
openid_identifier	query param	/ikiwiki.cgi	Cross-site scripting (XSS) in templates/openid-selector.tmpl in ikiwiki before 3.20150329 allows remote attackers to inject arbitrary web script or HTML via the openid_identifier parameter in a verify action to ikiwiki.cgi.	CWE-79
action	query param	/ikiwiki.cgi	Cross-site scripting (XSS) in templates/openid-selector.tmpl in ikiwiki before 3.20150329 allows remote attackers to inject arbitrary web script or HTML via the openid_identifier parameter in a verify action to ikiwiki.cgi.	CWE-79

17 Jun 2026 00:24Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

CVSS 3.16.1

EPSS0.01688

CWE-79