Ubuntu.comUB:CVE-2011-5221CVE-2011-5221
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
71.5%
Cross-site scripting (XSS) vulnerability in the getLog function in
svnlook.php in WebSVN before 2.3.1 allows remote attackers to inject
arbitrary web script or HTML via the path parameter to (1) comp.php, (2)
diff.php, or (3) revision.php.
References
osvdb.org/77941
osvdb.org/77942
osvdb.org/77943
secunia.com/advisories/47288
st2tea.blogspot.com/2011/12/websvn-cross-site-scripting.html
websvn.tigris.org/issues/show_bug.cgi?id=275
www.securitytracker.com/id?1026438
xforce.iss.net/xforce/xfdb/71888
launchpad.net/bugs/cve/CVE-2011-5221
nvd.nist.gov/vuln/detail/CVE-2011-5221
security-tracker.debian.org/tracker/CVE-2011-5221
www.cve.org/CVERecord?id=CVE-2011-5221
Related
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
71.5%