Lucene search

RubySecRUBY:RWIKI-2006-2581

HistoryMay 13, 2006 - 8:00 p.m.

RWiki before 2.1.1 has cross-site scripting vulnerability

2006-05-1320:00:00

RubySec

web.archive.org

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

JSON

Cross-site scripting (XSS) vulnerability in Wiki content in
RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to inject
arbitrary web script or HTML via unknown attack vectors.

Affected configurations

Vulners

Node

rubyrwikiRange≤2.1.1

VendorProductVersionCPE
rubyrwiki*cpe:2.3:a:ruby:rwiki:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ruby	rwiki	*	cpe:2.3:a:ruby:rwiki::::::::

References

web.archive.org/web/20090501134922/www2a.biglobe.ne.jp/~seki/ruby/rwiki.html

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

JSON

Related for RUBY:RWIKI-2006-2581