Lucene search

K
freebsdFreeBSD9B037A0D-EF2C-11E2-B4A0-8C705AF55518
HistoryJun 28, 2013 - 12:00 a.m.

gallery -- multiple vulnerabilities

2013-06-2800:00:00
vuxml.freebsd.org
20

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.016

Percentile

87.6%

Red Hat Security Response Team reports:

Gallery upstream has released 3.0.9 version, correcting two
security flaws:
Issue #1 - Improper stripping of URL fragments in flowplayer
SWF file might lead to reply attacks (a different flaw than
CVE-2013-2138).
Issue #2 - gallery3: Multiple information exposure flaws in
data rest core module.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchgallery3< 3.0.9UNKNOWN

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.016

Percentile

87.6%

Related for 9B037A0D-EF2C-11E2-B4A0-8C705AF55518