Lucene search

[email protected]CVE-2008-1476

HistoryMar 24, 2008 - 10:44 p.m.

CVE-2008-1476

2008-03-2422:44:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2008-1476

cross-site scripting

xss

serendipity

s9y

web security

trackbacks

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

67.8%

JSON

Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to received trackbacks.

Affected configurations

NVD

Node

serendipityserendipityRange≤1.2.1

serendipityserendipityMatch0.3

serendipityserendipityMatch0.4

serendipityserendipityMatch0.5_pl1

serendipityserendipityMatch0.6_pl3

serendipityserendipityMatch0.7

serendipityserendipityMatch0.7.1

serendipityserendipityMatch0.8

serendipityserendipityMatch0.8.1

serendipityserendipityMatch0.8.2

serendipityserendipityMatch0.8.3

serendipityserendipityMatch0.8.4

serendipityserendipityMatch0.8.5

serendipityserendipityMatch0.9

serendipityserendipityMatch0.9.1

serendipityserendipityMatch1.0

serendipityserendipityMatch1.0.1

serendipityserendipityMatch1.0.2

serendipityserendipityMatch1.0.3

serendipityserendipityMatch1.0.4

serendipityserendipityMatch1.1

serendipityserendipityMatch1.1.1

serendipityserendipityMatch1.1.2

serendipityserendipityMatch1.1.3

serendipityserendipityMatch1.1.4

serendipityserendipityMatch1.2

CPENameOperatorVersion
serendipity:serendipityserendipityle1.2.1
serendipity:serendipityserendipityeq0.3
serendipity:serendipityserendipityeq0.4
serendipity:serendipityserendipityeq0.5_pl1
serendipity:serendipityserendipityeq0.6_pl3
serendipity:serendipityserendipityeq0.7
serendipity:serendipityserendipityeq0.7.1
serendipity:serendipityserendipityeq0.8
serendipity:serendipityserendipityeq0.8.1
serendipity:serendipityserendipityeq0.8.2

CPE	Name	Operator	Version
serendipity:serendipity	serendipity	le	1.2.1
serendipity:serendipity	serendipity	eq	0.3
serendipity:serendipity	serendipity	eq	0.4
serendipity:serendipity	serendipity	eq	0.5_pl1
serendipity:serendipity	serendipity	eq	0.6_pl3
serendipity:serendipity	serendipity	eq	0.7
serendipity:serendipity	serendipity	eq	0.7.1
serendipity:serendipity	serendipity	eq	0.8
serendipity:serendipity	serendipity	eq	0.8.1
serendipity:serendipity	serendipity	eq	0.8.2