Lucene search

K
cvelistMitreCVELIST:CVE-2008-6879
HistoryOct 03, 2022 - 4:13 p.m.

CVE-2008-6879

2022-10-0316:13:51
mitre
www.cve.org
apache roller
cross-site scripting
remote attackers
web script
html
search action

5.6 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.2%

Cross-site scripting (XSS) vulnerability in Apache Roller 2.3, 3.0, 3.1, and 4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action.

5.6 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.2%

Related for CVELIST:CVE-2008-6879