Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-2103
HistoryMay 07, 2008 - 12:00 a.m.

CVE-2008-2103

2008-05-0700:00:00
ubuntu.com
ubuntu.com
10

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.008 Low

EPSS

Percentile

81.3%

Cross-site scripting (XSS) vulnerability in Bugzilla 2.17.2 and later
allows remote attackers to inject arbitrary web script or HTML via the id
parameter to the “Format for Printing” view or “Long Format” bug list.

Notes

Author Note
kees this should really be for bugzilla3, but it’s not in intrepid yet

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.008 Low

EPSS

Percentile

81.3%