CVE-2002-1348

2004-09-0104:00:00

[email protected]

web.nvd.nist.gov

cve-2002-1348

w3m

html

img

security vulnerability

cookie access

file access

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.1 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.3%

JSON

w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies.

Affected configurations

NVD

Node

w3mw3mMatch0.2

w3mw3mMatch0.2.1

w3mw3mMatch0.2.2

w3mw3mMatch0.2.3

w3mw3mMatch0.2.4

w3mw3mMatch0.2.5

w3mw3mMatch0.2.5.1

w3mw3mMatch0.3

w3mw3mMatch0.3.1

w3mw3mMatch0.3.2

w3mw3mMatch0.3.2.1

w3mw3mMatch0.3.2.2

CPENameOperatorVersion
w3m:w3mw3meq0.2
w3m:w3mw3meq0.2.1
w3m:w3mw3meq0.2.2
w3m:w3mw3meq0.2.3
w3m:w3mw3meq0.2.4
w3m:w3mw3meq0.2.5
w3m:w3mw3meq0.2.5.1
w3m:w3mw3meq0.3
w3m:w3mw3meq0.3.1
w3m:w3mw3meq0.3.2

CPE	Name	Operator	Version
w3m:w3m	w3m	eq	0.2
w3m:w3m	w3m	eq	0.2.1
w3m:w3m	w3m	eq	0.2.2
w3m:w3m	w3m	eq	0.2.3
w3m:w3m	w3m	eq	0.2.4
w3m:w3m	w3m	eq	0.2.5
w3m:w3m	w3m	eq	0.2.5.1
w3m:w3m	w3m	eq	0.3
w3m:w3m	w3m	eq	0.3.1
w3m:w3m	w3m	eq	0.3.2