Lucene search

K
cve[email protected]CVE-2007-1179
HistoryMar 02, 2007 - 9:18 p.m.

CVE-2007-1179

2007-03-0221:18:00
web.nvd.nist.gov
24
webapp
vulnerability
email address
management
nvd
cve-2007-1179

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

75.2%

WebAPP before 0.9.9.5 does not properly manage e-mail addresses in certain contexts related to (1) the Recommend feature, Email Article (2) senders and (3) recipients, (4) New User Approval, (5) Edit Profiles, (6) the Newsletter Subscription form, (7) the Recommend form, and (8) sending of articles, which has unknown impact, and remote attack vectors related to spam attacks and possibly other attacks.

Affected configurations

NVD
Node
web-app.orgwebappRange0.9.9.4

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

75.2%

Related for CVE-2007-1179