Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-C3QV-MF8H-434R
HistoryMay 01, 2022 - 11:40 p.m.

Roundup vulnerability related to Cross-site scripting (XSS)

2022-05-0123:40:33
CWE-79
GitHub Advisory Database
github.com
2

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.012 Low

EPSS

Percentile

85.4%

JSON

Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and attack vectors, some of which may be related to cross-site scripting (XSS).

CPENameOperatorVersion
rounduplt1.4.4

References

Related

securityvulns 4
veracode 1
cve 1
openvas 10
osv 2
ubuntucve 1
redhatcve 1
prion 1
debian 3
nessus 4
gentoo 1
securityvulns
securityvulns
[SECURITY] [DSA 1554-1] New roundup packages fix cross-site scripting vulnerability
2008-04-24 00:00:00
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2008-04-24 00:00:00
[SECURITY] [DSA 1554-2] New roundup packages fix regression
2008-05-08 00:00:00
veracode
veracode
Cross Site Scripting(XSS)
2024-04-30 11:05:03
cve
cve
CVE-2008-1474
2008-03-24 22:44:00
openvas
openvas
Debian Security Advisory DSA 1554-1 (roundup)
2008-04-30 00:00:00
Debian: Security Advisory (DSA-1554-1)
2008-05-12 00:00:00
Debian Security Advisory DSA 1554-1 (roundup)
2008-04-30 00:00:00
osv
osv
Roundup vulnerability related to Cross-site scripting (XSS)
2022-05-01 23:40:33
PYSEC-2008-9
2008-03-24 22:44:00
ubuntucve
ubuntucve
CVE-2008-1474
2008-03-24 00:00:00
redhatcve
redhatcve
CVE-2008-1474
2019-10-04 22:02:03
prion
prion
Cross site scripting
2008-03-24 22:44:00
debian
debian
[SECURITY] [DSA 1554-1] New roundup packages fix cross-site scripting vulnerability
2008-04-22 21:33:54
[SECURITY] [DSA 1554-1] New roundup packages fix cross-site scripting vulnerability
2008-04-22 21:33:57
[SECURITY] [DSA 1554-2] New roundup packages fix regression
2008-05-06 11:29:13
nessus
nessus
Debian DSA-1554-2 : roundup - insufficient input sanitising
2008-04-25 00:00:00
Fedora 7 : roundup-1.4.4-1.fc7 (2008-2370)
2008-03-13 00:00:00
GLSA-200805-21 : Roundup: Permission bypass
2008-05-28 00:00:00
gentoo
gentoo
Roundup: Permission bypass
2008-05-27 00:00:00

6.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.012 Low

EPSS

Percentile

85.4%

JSON
Related for GHSA-C3QV-MF8H-434R
securityvulns4veracode1cve1openvas10osv2ubuntucve1redhatcve1prion1debian3nessus4gentoo1