Lucene search

K
jvnJapan Vulnerability NotesJVN:81813850
HistoryNov 05, 2013 - 12:00 a.m.

JVN#81813850: Tiki Wiki CMS Groupware vulnerable to cross-site scripting

2013-11-0500:00:00
Japan Vulnerability Notes
jvn.jp
18

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

50.8%

Tiki Wiki CMS Groupware (Tiki) is a content management system (CMS). Tiki contains a cross-site scripting vulnerability.

Impact

An arbitrary script may be executed on the web browser of an user who is logged in.

Solution

Apply an Update
Apply the appropriate update for the version of the software being used.

Products Affected

  • Tiki versions prior to 11.1
  • Tiki versions prior to 10.4
  • Tiki versions prior to 9.7LTS
  • Tiki versions prior to 6.13LTS

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

50.8%

Related for JVN:81813850