Lucene search

K
cvelistMitreCVELIST:CVE-2014-4301
HistoryJun 18, 2014 - 2:00 p.m.

CVE-2014-4301

2014-06-1814:00:00
mitre
www.cve.org

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.7%

Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) resources.js or (2) resources.css in ajenti:static/, related to the traceback page.

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.7%