Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-4696
HistoryOct 23, 2008 - 12:00 a.m.

CVE-2008-4696

2008-10-2300:00:00
ubuntu.com
ubuntu.com
13

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.832

Percentile

98.5%

Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61
allows remote attackers to inject arbitrary web script or HTML via the
anchor identifier (aka the “optional fragment”), which is not properly
escaped before storage in the History Search database (aka md.dat).

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.832

Percentile

98.5%