Lucene search
OpenJS FoundationFRIENDSOFPHP:IISOFT:YII2-BOOTSTRAP:CVE-2015-3397HistoryMay 10, 2015 - 3:43 a.m.
JSON Data encoded for use in HTML was not safe to use in IE6/IE7, possible XSS attacks
2015-05-1003:43:16
OpenJS Foundation
github.com
3
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
7.2 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
56.9%
Affected configurations
Node
yiisoftyii2_bootstrapRange<2.0.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| yiisoft/yii2-bootstrap | lt | 2.0.4 |
Related
veracode
veracode
Cross-site Scripting (XSS)
2017-07-27 22:41:32
cvelist
cvelist
CVE-2015-3397
2015-05-14 00:00:00
github
github
Yii Framework Cross-site Scripting Vulnerability
2022-05-17 03:30:00
nvd
nvd
CVE-2015-3397
2015-05-14 00:59:04
friendsofphp
friendsofphp
cve
cve
CVE-2015-3397
2015-05-14 00:59:04
prion
prion
Cross site scripting
2015-05-14 00:59:00
osv
osv
Yii Framework Cross-site Scripting Vulnerability
2022-05-17 03:30:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
7.2 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
56.9%
Related for FRIENDSOFPHP:IISOFT:YII2-BOOTSTRAP:CVE-2015-3397