Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-2771
HistoryNov 15, 2011 - 12:00 a.m.

CVE-2011-2771

2011-11-1500:00:00
ubuntu.com
ubuntu.com
8

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

58.1%

Multiple cross-site scripting (XSS) vulnerabilities in Mahara before 1.4.1
allow remote attackers to inject arbitrary web script or HTML via vectors
related to (1) URI attributes and (2) the External Feed component, as
demonstrated by the guid element in an RSS feed.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchmahara< 1.2.4-1ubuntu0.4UNKNOWN
ubuntu10.10noarchmahara< 1.2.5-2ubuntu0.3UNKNOWN
ubuntu11.04noarchmahara< 1.2.7-1ubuntu0.2UNKNOWN
ubuntu11.10noarchmahara< 1.4.0-1ubuntu0.1UNKNOWN

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

58.1%