Lucene search

PRIOn knowledge basePRION:CVE-2007-0791

HistoryFeb 06, 2007 - 7:28 p.m.

Cross site scripting

2007-02-0619:28:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.044 Low

EPSS

Percentile

92.1%

JSON

Cross-site scripting (XSS) vulnerability in Atom feeds in Bugzilla 2.20.3, 2.22.1, and 2.23.3, and earlier versions down to 2.20.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
bugzillaeq2.23.2
bugzillaeq2.21.2
bugzillaeq2.22.1
bugzillaeq2.20.1
bugzillaeq2.23.3
bugzillaeq2.22 rc1
bugzillaeq2.22
bugzillaeq2.20.3
bugzillaeq2.20.2
bugzillaeq2.21.1

Name	Operator	Version
bugzilla	eq	2.23.2
bugzilla	eq	2.21.2
bugzilla	eq	2.22.1
bugzilla	eq	2.20.1
bugzilla	eq	2.23.3
bugzilla	eq	2.22 rc1
bugzilla	eq	2.22
bugzilla	eq	2.20.3
bugzilla	eq	2.20.2
bugzilla	eq	2.21.1

Rows per page:

1-10 of 111

References

osvdb.org/33090

secunia.com/advisories/24031

securityreason.com/securityalert/2222

securitytracker.com/id?1017585

www.bugzilla.org/security/2.20.3/

www.securityfocus.com/archive/1/459025/100/0/threaded

www.securityfocus.com/bid/22380

www.vupen.com/english/advisories/2007/0477

exchange.xforce.ibmcloud.com/vulnerabilities/32248

6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.044 Low

EPSS

Percentile

92.1%

JSON

Related for PRION:CVE-2007-0791