Lucene search

Ubuntu.comUB:CVE-2020-27741

HistoryOct 28, 2020 - 12:00 a.m.

CVE-2020-27741

2020-10-2800:00:00

ubuntu.com

cve-2020-27741

cross-site scripting

citadel webcit

remote attackers

arbitrary web script

html

multiple pages

parameters

security vulnerabilities

debian

unix

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.002

Percentile

53.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Citadel WebCit
through 926 allow remote attackers to inject arbitrary web script or HTML
via multiple pages and parameters. NOTE: this was reported to the vendor in
a publicly archived “Multiple Security Vulnerabilities in WebCit 926”
thread.

Bugs

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=973385>

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchwebcit< anyUNKNOWN
ubuntu20.04noarchwebcit< anyUNKNOWN
ubuntu16.04noarchwebcit< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	webcit	< any	UNKNOWN
ubuntu	20.04	noarch	webcit	< any	UNKNOWN
ubuntu	16.04	noarch	webcit	< any	UNKNOWN

References

uncensored.citadel.org/readfwd?go=Citadel%20Security?start_reading_at=4592834

launchpad.net/bugs/cve/CVE-2020-27741

nvd.nist.gov/vuln/detail/CVE-2020-27741

security-tracker.debian.org/tracker/CVE-2020-27741

www.citadel.org/

www.cve.org/CVERecord?id=CVE-2020-27741

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.002

Percentile

53.7%

JSON

Related for UB:CVE-2020-27741