CVE-2018-0499

2018-07-0212:00:00

debian

www.cve.org

0.001 Low

EPSS

Percentile

48.4%

JSON

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet().

CNA Affected

[
  {
    "product": "Xapian xapian-core before 1.4.6",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Xapian xapian-core before 1.4.6"
      }
    ]
  }
]