Lucene search

K
freebsdFreeBSD0491D15A-5875-11DF-8D80-0015587E2CC1
HistoryJan 05, 2010 - 12:00 a.m.

lxr -- multiple XSS vulnerabilities

2010-01-0500:00:00
vuxml.freebsd.org
10

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

47.8%

Dan Rosenberg reports:

There are several cross-site scripting vulnerabilities
in LXR. These vulnerabilities could allow an attacker
to execute scripts in a user’s browser, steal cookies
associated with vulnerable domains, redirect the user
to malicious websites, etc.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchlxr<= 0.9.6UNKNOWN

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

47.8%

Related for 0491D15A-5875-11DF-8D80-0015587E2CC1