CVE-2007-6306
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
8 High
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.5%
Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| jfree:jfreechart | jfree jfreechart | eq | 1.0.8 |
References
jfreechart.svn.sourceforge.net/viewvc/jfreechart/branches/jfreechart-1.0.8-security/NEWS?r1=679&r2=680
jfreechart.svn.sourceforge.net/viewvc/jfreechart/trunk/source/org/jfree/chart/entity/ChartEntity.java?r1=662&r2=661&pathrev=662
jfreechart.svn.sourceforge.net/viewvc/jfreechart/trunk/source/org/jfree/chart/imagemap/ImageMapUtilities.java?r1=662&r2=661&pathrev=662
osvdb.org/41843
osvdb.org/41844
osvdb.org/41845
rhn.redhat.com/errata/RHSA-2008-0630.html
secunia.com/advisories/27959
secunia.com/advisories/31493
securityreason.com/securityalert/3430
www.rapid7.com/advisories/R7-0031.jsp
www.redhat.com/support/errata/RHSA-2008-0151.html
www.redhat.com/support/errata/RHSA-2008-0158.html
www.redhat.com/support/errata/RHSA-2008-0213.html
www.redhat.com/support/errata/RHSA-2008-0261.html
www.securityfocus.com/archive/1/484709/100/0/threaded
www.securityfocus.com/bid/26752
exchange.xforce.ibmcloud.com/vulnerabilities/38922
Related
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
8 High
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.5%