CVE-2007-6306

2007-12-1121:46:00

Debian Security Bug Tracker

security-tracker.debian.org

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.007 Low

EPSS

Percentile

80.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area.

OSVersionArchitecturePackageVersionFilename
Debian12alllibjfreechart-java< 1.0.9-1libjfreechart-java_1.0.9-1_all.deb
Debian11alllibjfreechart-java< 1.0.9-1libjfreechart-java_1.0.9-1_all.deb
Debian999alllibjfreechart-java< 1.0.9-1libjfreechart-java_1.0.9-1_all.deb
Debian13alllibjfreechart-java< 1.0.9-1libjfreechart-java_1.0.9-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libjfreechart-java	< 1.0.9-1	libjfreechart-java_1.0.9-1_all.deb
Debian	11	all	libjfreechart-java	< 1.0.9-1	libjfreechart-java_1.0.9-1_all.deb
Debian	999	all	libjfreechart-java	< 1.0.9-1	libjfreechart-java_1.0.9-1_all.deb
Debian	13	all	libjfreechart-java	< 1.0.9-1	libjfreechart-java_1.0.9-1_all.deb