← Voltar para CVEs

CVE-2008-2025

N/A

Descricao

Cross-site scripting (XSS) vulnerability in Apache Struts before 1.2.9-162.31.1 on SUSE Linux Enterprise (SLE) 11, before 1.2.9-108.2 on SUSE openSUSE 10.3, before 1.2.9-198.2 on SUSE openSUSE 11.0, and before 1.2.9-162.163.2 on SUSE openSUSE 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "insufficient quoting of parameters."

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado4/9/2009

Ultima modificacao4/23/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

apache:strutsnovell:suse_linuxopensuse:opensuse

Fraquezas (CWE)

CWE-79

Referencias

http://download.opensuse.org/update/10.3-test/repodata/patch-struts-5872.xml(cve@mitre.org)

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html(cve@mitre.org)

http://osvdb.org/53380(cve@mitre.org)

http://secunia.com/advisories/34567(cve@mitre.org)

http://secunia.com/advisories/34642(cve@mitre.org)

http://support.novell.com/security/cve/CVE-2008-2025.html(cve@mitre.org)

https://bugzilla.novell.com/show_bug.cgi?id=385273(cve@mitre.org)

https://launchpad.net/bugs/cve/2008-2025(cve@mitre.org)

http://download.opensuse.org/update/10.3-test/repodata/patch-struts-5872.xml(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html(af854a3a-2127-422b-91ae-364da2661108)

http://osvdb.org/53380(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/34567(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/34642(af854a3a-2127-422b-91ae-364da2661108)

http://support.novell.com/security/cve/CVE-2008-2025.html(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.novell.com/show_bug.cgi?id=385273(af854a3a-2127-422b-91ae-364da2661108)

https://launchpad.net/bugs/cve/2008-2025(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.