Lucene search

K
jvnJapan Vulnerability NotesJVN:77432756
HistoryJul 03, 2008 - 12:00 a.m.

JVN#77432756 FreeStyleWiki cross-site scripting vulnerability

2008-07-0300:00:00
Japan Vulnerability Notes
jvn.jp
14

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.027 Low

EPSS

Percentile

90.5%

FreeStyleWiki, one of Wiki clones, contains a cross-site scripting vulnerability.

Impact

An arbitrary script could be executed if a FreeStyleWiki user views a specially crafted web page with Internet Explorer.
Other web browsers that use the Internet Explorer browser engine may also be affected.

Solution

Update the Software
Apply the latest update provided by the developer.

Products Affected

  • FreeStyleWiki 3.6.2 and earlier
  • FreeStyleWiki 3.6.3 dev3 and earlier (developmental version)

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.027 Low

EPSS

Percentile

90.5%

Related for JVN:77432756