[SECURITY] [DLA 296-1] extplorer security update

2015-08-2119:10:39

lists.debian.org

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.7%

JSON

Package : extplorer
Version : 2.1.0b6+dfsg.2-1+squeeze3
CVE ID : CVE-2015-0896

Multiple cross-site scripting (XSS) vulnerabilities in eXtplorer before
2.1.7 allow remote attackers to inject arbitrary web script or HTML via
unspecified vectors.

OSVersionArchitecturePackageVersionFilename
Debian7allextplorer< 2.1.0b6+dfsg.3-4+deb7u2extplorer_2.1.0b6+dfsg.3-4+deb7u2_all.deb
Debian6allextplorer< 2.1.0b6+dfsg.2-1+squeeze3extplorer_2.1.0b6+dfsg.2-1+squeeze3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	all	extplorer	< 2.1.0b6+dfsg.3-4+deb7u2	extplorer_2.1.0b6+dfsg.3-4+deb7u2_all.deb
Debian	6	all	extplorer	< 2.1.0b6+dfsg.2-1+squeeze3	extplorer_2.1.0b6+dfsg.2-1+squeeze3_all.deb