Lucene search
Gentoo FoundationMGASA-2015-0488HistoryDec 28, 2015 - 10:23 p.m.
Updated perl-HTML-Scrubber packages fix CVE-2015-5667
2015-12-2822:23:26
Gentoo Foundation
advisories.mageia.org
5
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
72.9%
Updated perl-HTML-Scrubber package fixes security vulnerability: Cross-site scripting (XSS) vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remote attackers to inject arbitrary web script or HTML via a crafted comment.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 5 | noarch | perl-html-scrubber | < 0.110.0-6.1 | perl-HTML-Scrubber-0.110.0-6.1.mga5 |
References
Related
nessus
nessus
Amazon Linux AMI : perl-HTML-Scrubber (ALAS-2015-629)
2015-12-15 00:00:00
FreeBSD : p5-HTML-Scrubber -- XSS vulnerability (2f7f4db2-8819-11e5-ab94-002590263bf5)
2015-11-11 00:00:00
Fedora 23 : perl-HTML-Scrubber-0.15-1.fc23 (2015-84a95e39d4)
2016-03-04 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2015-629)
2015-12-15 00:00:00
Debian: Security Advisory (DLA-339-1)
2023-03-08 00:00:00
Mageia: Security Advisory (MGASA-2015-0488)
2015-12-29 00:00:00
prion
prion
Cross site scripting
2015-10-31 04:59:00
amazon
amazon
Medium: perl-HTML-Scrubber
2015-12-14 10:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: perl-HTML-Scrubber-0.15-1.fc22
2015-11-30 23:29:58
[SECURITY] Fedora 21 Update: perl-HTML-Scrubber-0.15-1.fc21
2015-11-30 23:52:25
[SECURITY] Fedora 23 Update: perl-HTML-Scrubber-0.15-1.fc23
2015-11-30 21:27:47
ubuntucve
ubuntucve
CVE-2015-5667
2015-10-31 00:00:00
nvd
nvd
CVE-2015-5667
2015-10-31 04:59:00
debian
debian
[SECURITY] [DLA 339-1] libhtml-scrubber-perl security update
2015-11-03 15:50:03
cve
cve
CVE-2015-5667
2015-10-31 04:59:00
freebsd
freebsd
p5-HTML-Scrubber -- XSS vulnerability
2015-10-10 00:00:00
jvn
jvn
JVN#53973084: HTML::Scrubber vulnerable to cross-site scripting
2015-10-30 00:00:00
cvelist
cvelist
CVE-2015-5667
2015-10-31 01:00:00
debiancve
debiancve
CVE-2015-5667
2015-10-31 04:59:00
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
72.9%
Related for MGASA-2015-0488