PT-2009-5893
CVE-2009-3618
·
تاريخ النشر
2009-11-10
·
تاريخ التحديث
2018-08-13
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
ViewVC versions 1.0 through 1.0.8
ViewVC versions 1.1 through 1.1.1
Description
A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the
view parameter.Recommendations
For ViewVC versions 1.0 through 1.0.8, update to version 1.0.9 or later.
For ViewVC versions 1.1 through 1.1.1, update to version 1.1.2 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾