Lucene search

K
cveRedhatCVE-2013-2181
HistoryJul 29, 2013 - 11:27 p.m.

CVE-2013-2181

2013-07-2923:27:37
CWE-79
redhat
web.nvd.nist.gov
22
cve-2013-2181
cross-site scripting
xss
directory listing plugin
monkey http daemon
monkeyd 1.2.2
web script
html

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

42.6%

Cross-site scripting (XSS) vulnerability in the Directory Listing plugin in Monkey HTTP Daemon (monkeyd) 1.2.2 allows attackers to inject arbitrary web script or HTML via a file name.

Affected configurations

Nvd
Node
monkey-projectmonkeyMatch1.2.2
VendorProductVersionCPE
monkey-projectmonkey1.2.2cpe:2.3:a:monkey-project:monkey:1.2.2:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

42.6%

Related for CVE-2013-2181