Lucene search
HistoryApr 11, 2011 - 6:55 p.m.
CVE-2011-1401
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
5.3 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
54.7%
ikiwiki before 3.20110328 does not ascertain whether the htmlscrubber plugin is enabled during processing of the βmeta stylesheetβ directive, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS) token sequences in (1) the default stylesheet or (2) an alternate stylesheet.
Affected configurations
Node
ikiwikiikiwikiRangeβ€3.20110321
ORikiwikiikiwikiMatch1.0
ORikiwikiikiwikiMatch1.1
ORikiwikiikiwikiMatch1.1.47
ORikiwikiikiwikiMatch1.2
ORikiwikiikiwikiMatch1.3
ORikiwikiikiwikiMatch1.4
ORikiwikiikiwikiMatch1.5
ORikiwikiikiwikiMatch1.6
ORikiwikiikiwikiMatch1.7
ORikiwikiikiwikiMatch1.8
ORikiwikiikiwikiMatch1.9
ORikiwikiikiwikiMatch1.10
ORikiwikiikiwikiMatch1.11
ORikiwikiikiwikiMatch1.12
ORikiwikiikiwikiMatch1.13
ORikiwikiikiwikiMatch1.14
ORikiwikiikiwikiMatch1.15
ORikiwikiikiwikiMatch1.16
ORikiwikiikiwikiMatch1.17
ORikiwikiikiwikiMatch1.18
ORikiwikiikiwikiMatch1.19
ORikiwikiikiwikiMatch1.20
ORikiwikiikiwikiMatch1.21
ORikiwikiikiwikiMatch1.22
ORikiwikiikiwikiMatch1.23
ORikiwikiikiwikiMatch1.24
ORikiwikiikiwikiMatch1.25
ORikiwikiikiwikiMatch1.26
ORikiwikiikiwikiMatch1.27
ORikiwikiikiwikiMatch1.28
ORikiwikiikiwikiMatch1.29
ORikiwikiikiwikiMatch1.30
ORikiwikiikiwikiMatch1.31
ORikiwikiikiwikiMatch1.32
ORikiwikiikiwikiMatch1.33.3
ORikiwikiikiwikiMatch1.34
ORikiwikiikiwikiMatch1.34.1
ORikiwikiikiwikiMatch1.34.2
ORikiwikiikiwikiMatch1.35
ORikiwikiikiwikiMatch1.36
ORikiwikiikiwikiMatch1.37
ORikiwikiikiwikiMatch1.38
ORikiwikiikiwikiMatch1.39
ORikiwikiikiwikiMatch1.40
ORikiwikiikiwikiMatch1.41
ORikiwikiikiwikiMatch1.42
ORikiwikiikiwikiMatch1.43
ORikiwikiikiwikiMatch1.44
ORikiwikiikiwikiMatch1.45
ORikiwikiikiwikiMatch1.46
ORikiwikiikiwikiMatch1.47
ORikiwikiikiwikiMatch1.48
ORikiwikiikiwikiMatch1.49
ORikiwikiikiwikiMatch1.50
ORikiwikiikiwikiMatch1.51
ORikiwikiikiwikiMatch2.0
ORikiwikiikiwikiMatch2.00
ORikiwikiikiwikiMatch2.1
ORikiwikiikiwikiMatch2.2
ORikiwikiikiwikiMatch2.3
ORikiwikiikiwikiMatch2.4
ORikiwikiikiwikiMatch2.5
ORikiwikiikiwikiMatch2.6
ORikiwikiikiwikiMatch2.6.1
ORikiwikiikiwikiMatch2.7
ORikiwikiikiwikiMatch2.8
ORikiwikiikiwikiMatch2.9
ORikiwikiikiwikiMatch2.10
ORikiwikiikiwikiMatch2.11
ORikiwikiikiwikiMatch2.12
ORikiwikiikiwikiMatch2.13
ORikiwikiikiwikiMatch2.14
ORikiwikiikiwikiMatch2.15
ORikiwikiikiwikiMatch2.16
ORikiwikiikiwikiMatch2.17
ORikiwikiikiwikiMatch2.18
ORikiwikiikiwikiMatch2.19
ORikiwikiikiwikiMatch2.20
ORikiwikiikiwikiMatch2.30
ORikiwikiikiwikiMatch2.31
ORikiwikiikiwikiMatch2.31.1
ORikiwikiikiwikiMatch2.31.2
ORikiwikiikiwikiMatch2.31.3
ORikiwikiikiwikiMatch2.40
ORikiwikiikiwikiMatch2.41
ORikiwikiikiwikiMatch2.42
ORikiwikiikiwikiMatch2.43
ORikiwikiikiwikiMatch2.44
ORikiwikiikiwikiMatch2.45
ORikiwikiikiwikiMatch2.46
ORikiwikiikiwikiMatch2.47
ORikiwikiikiwikiMatch2.48
ORikiwikiikiwikiMatch2.49
ORikiwikiikiwikiMatch2.50
ORikiwikiikiwikiMatch2.51
ORikiwikiikiwikiMatch2.52
ORikiwikiikiwikiMatch2.53
ORikiwikiikiwikiMatch2.54
ORikiwikiikiwikiMatch2.55
ORikiwikiikiwikiMatch2.56
ORikiwikiikiwikiMatch2.60
ORikiwikiikiwikiMatch2.61
ORikiwikiikiwikiMatch2.62
ORikiwikiikiwikiMatch2.62.1
ORikiwikiikiwikiMatch2.63
ORikiwikiikiwikiMatch2.64
ORikiwikiikiwikiMatch2.65
ORikiwikiikiwikiMatch2.66
ORikiwikiikiwikiMatch2.67
ORikiwikiikiwikiMatch2.68
ORikiwikiikiwikiMatch2.69
ORikiwikiikiwikiMatch2.70
ORikiwikiikiwikiMatch2.71
ORikiwikiikiwikiMatch2.72
ORikiwikiikiwikiMatch3.0
ORikiwikiikiwikiMatch3.00
ORikiwikiikiwikiMatch3.01
ORikiwikiikiwikiMatch3.02
ORikiwikiikiwikiMatch3.03
ORikiwikiikiwikiMatch3.04
ORikiwikiikiwikiMatch3.05
ORikiwikiikiwikiMatch3.06
ORikiwikiikiwikiMatch3.07
ORikiwikiikiwikiMatch3.08
ORikiwikiikiwikiMatch3.09
ORikiwikiikiwikiMatch3.10
ORikiwikiikiwikiMatch3.11
ORikiwikiikiwikiMatch3.12
ORikiwikiikiwikiMatch3.13
ORikiwikiikiwikiMatch3.14
ORikiwikiikiwikiMatch3.141
ORikiwikiikiwikiMatch3.1415
ORikiwikiikiwikiMatch3.14159
ORikiwikiikiwikiMatch3.141592
ORikiwikiikiwikiMatch3.1415926
ORikiwikiikiwikiMatch3.14159265
ORikiwikiikiwikiMatch3.20091009
ORikiwikiikiwikiMatch3.20091017
ORikiwikiikiwikiMatch3.20091022
ORikiwikiikiwikiMatch3.20091023
ORikiwikiikiwikiMatch3.20091031
ORikiwikiikiwikiMatch3.20091113
ORikiwikiikiwikiMatch3.20091202
ORikiwikiikiwikiMatch3.20091218
ORikiwikiikiwikiMatch3.20100102.3
ORikiwikiikiwikiMatch3.20100122
ORikiwikiikiwikiMatch3.20100212
ORikiwikiikiwikiMatch3.20100302
ORikiwikiikiwikiMatch3.20100312
ORikiwikiikiwikiMatch3.20100403
ORikiwikiikiwikiMatch3.20100427
ORikiwikiikiwikiMatch3.20100501
ORikiwikiikiwikiMatch3.20100504
ORikiwikiikiwikiMatch3.20100515
ORikiwikiikiwikiMatch3.20100518
ORikiwikiikiwikiMatch3.20100518.2
ORikiwikiikiwikiMatch3.20100610
ORikiwikiikiwikiMatch3.20100623
ORikiwikiikiwikiMatch3.20100722
ORikiwikiikiwikiMatch3.20100804
ORikiwikiikiwikiMatch3.20100815
ORikiwikiikiwikiMatch3.20100831
ORikiwikiikiwikiMatch3.20100926
ORikiwikiikiwikiMatch3.20101019
ORikiwikiikiwikiMatch3.20101023
ORikiwikiikiwikiMatch3.20101112
ORikiwikiikiwikiMatch3.20101129
ORikiwikiikiwikiMatch3.20101201
ORikiwikiikiwikiMatch3.20101231
ORikiwikiikiwikiMatch3.20110105
ORikiwikiikiwikiMatch3.20110123
ORikiwikiikiwikiMatch3.20110124
ORikiwikiikiwikiMatch3.20110225
References
ikiwiki.info/security/#index39h2
lists.fedoraproject.org/pipermail/package-announce/2011-April/058403.html
secunia.com/advisories/44079
secunia.com/advisories/44137
www.debian.org/security/2011/dsa-2214
www.securityfocus.com/bid/47285
www.vupen.com/english/advisories/2011/0907
www.vupen.com/english/advisories/2011/1005
Related
openvas
openvas
Debian Security Advisory DSA 2214-1 (ikiwiki)
2011-05-12 00:00:00
Debian: Security Advisory (DSA-2214-1)
2011-05-12 00:00:00
Fedora Update for ikiwiki FEDORA-2011-5180
2011-04-22 00:00:00
prion
prion
Cross site scripting
2011-04-11 18:55:00
debiancve
debiancve
CVE-2011-1401
2011-04-11 18:55:03
ubuntucve
ubuntucve
CVE-2011-1401
2011-04-11 00:00:00
cve
cve
CVE-2011-1401
2011-04-11 18:55:03
nessus
nessus
Debian DSA-2214-1 : ikiwiki - missing input validation
2011-04-11 00:00:00
Fedora 15 : ikiwiki-3.20110328-1.fc15 (2011-5249)
2011-04-18 00:00:00
Fedora 14 : ikiwiki-3.20110328-1.fc14 (2011-5180)
2011-04-22 00:00:00
debian
debian
[SECURITY] [DSA 2214-1] ikiwiki security update
2011-04-08 19:53:26
seebug
seebug
ikiwiki 'htmlscrubber'ζδ»Άθ·¨η«θζ¬ζΌζ΄
2011-04-12 00:00:00
securityvulns
securityvulns
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2011-04-12 00:00:00
[SECURITY] [DSA 2214-1] ikiwiki security update
2011-04-12 00:00:00
cvelist
cvelist
CVE-2011-1401
2011-04-11 18:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: ikiwiki-3.20110328-1.fc15
2011-04-18 04:03:48
[SECURITY] Fedora 14 Update: ikiwiki-3.20110328-1.fc14
2011-04-21 22:31:19
[SECURITY] Fedora 13 Update: ikiwiki-3.20100815.7-1.fc13
2011-04-21 22:26:49
altlinux
altlinux
Security fix for the ALT Linux 6 package ikiwiki version 3.20110328-alt1
2011-04-13 00:00:00
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
5.3 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
54.7%
Related for NVD:CVE-2011-1401