Lucene search

K
freebsdFreeBSD673AEC6F-1CAE-11DA-BC01-000E0C2E438A
HistoryFeb 03, 2005 - 12:00 a.m.

htdig -- cross site scripting vulnerability

2005-02-0300:00:00
vuxml.freebsd.org
6

0.023 Low

EPSS

Percentile

89.7%

Michael Krax reports a vulnerability within htdig. The
vulnerability lies within an unsanitized config parameter,
allowing a malicious attacker to execute arbitrary scripting
code on the target’s browser. This might allow the attacker
to obtain the user’s cookies which are associated with the
site, including cookies used for authentication.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchhtdig< 3.2.0.b6_1UNKNOWN

0.023 Low

EPSS

Percentile

89.7%