CVE-2008-3023

2008-07-0717:41:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2008-3023

cross-site scripting

xss

freestyle wiki

security vulnerability

internet explorer

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.6 Medium

AI Score

Confidence

High

0.027 Low

EPSS

Percentile

90.5%

JSON

Cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.6.2 and earlier, and 3.6.3 dev3 and earlier development versions, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2005-1799.

Affected configurations

NVD

Node

fswikifreestyle_wikiRange≤3.6.2

fswikifreestyle_wikiRange≤3.6.3dev3

microsoftinternet_explorer

CPENameOperatorVersion
fswiki:freestyle_wikifswiki freestyle wikile3.6.2
fswiki:freestyle_wikifswiki freestyle wikile3.6.3
microsoft:internet_explorermicrosoft internet explorereq*

CPE	Name	Operator	Version
fswiki:freestyle_wiki	fswiki freestyle wiki	le	3.6.2
fswiki:freestyle_wiki	fswiki freestyle wiki	le	3.6.3
microsoft:internet_explorer	microsoft internet explorer	eq	*