Lucene search
HistoryOct 03, 2022 - 4:21 p.m.
CVE-2010-1273
emweb wt
cve-2010-1273
security vulnerability
utf-8 encoding
form validation
remote attack vectors
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.5%
Emweb Wt before 3.1.1 does not validate the UTF-8 encoding of (1) form values and (2) JSignal arguments, which has unspecified impact and remote attack vectors.
Affected configurations
Node
emwebwtRange≤3.1.0
ORemwebwtMatch1.1.4
ORemwebwtMatch1.1.5
ORemwebwtMatch1.1.6
ORemwebwtMatch1.1.7
ORemwebwtMatch2.0.0
ORemwebwtMatch2.0.1
ORemwebwtMatch2.0.4
ORemwebwtMatch2.0.4a
ORemwebwtMatch2.0.5
ORemwebwtMatch2.1.0
ORemwebwtMatch2.1.1
ORemwebwtMatch2.1.2
ORemwebwtMatch2.1.3
ORemwebwtMatch2.1.4
ORemwebwtMatch2.1.5
ORemwebwtMatch2.2.0
ORemwebwtMatch2.2.1
ORemwebwtMatch2.2.2
ORemwebwtMatch2.2.3
ORemwebwtMatch2.99.0
ORemwebwtMatch2.99.1
ORemwebwtMatch2.99.2
ORemwebwtMatch2.99.3
ORemwebwtMatch2.99.4
ORemwebwtMatch2.99.5
ORemwebwtMatch3.0.0
Related
prion
prion
Design/Logic Flaw
2010-04-06 16:30:00
nvd
nvd
CVE-2010-1273
2010-04-06 16:30:00
cvelist
cvelist
CVE-2010-1273
2022-10-03 16:21:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.5%
Related for CVE-2010-1273