NVD

Id
55960  
Name
CVE-2007-3816  
Description
** DISPUTED ** JWIG might allow context-dependent attackers to cause a denial of service (service degradation) via loops of references to external templates. NOTE: this issue has been disputed by multiple third parties who state that only the application developer can trigger the issue, so no privilege boundaries are crossed. However, it seems possible that this is a vulnerability class to which an JWIG application may be vulnerable if template contents can be influenced, but this would be an issue in the application itself, not JWIG.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2007-07-16  
Modified Date
2008-09-05  
Seq
2007-3816  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
284690 55960 CVE-2007-3816 20070721 [CVE-2007-3816][Advisory] JWIG Context-Dependent Template Calling Dos  View
284691 55960 CVE-2007-3816 20070726 [CVE 2007-3816] [Advisory] Vulnerability Facts Related JWIG Advisory  View
284692 55960 CVE-2007-3816 20070721 [CVE-2007-3816][Advisory] JWIG Context-Dependent Template Calling Dos  View
284693 55960 CVE-2007-3816 20070723 [CVE 2007-3816] [Advisory] Vulnerability Facts Related JWIG Advisory  View
284694 55960 CVE-2007-3816 20070722 Re: [CVE 2007-3816] [Advisory] Vulnerability Facts Related JWIG Advisory  View
284695 55960 CVE-2007-3816 http://www.secniche.org/papers/HackAnnotationsInJWIG.pdf  View
284696 55960 CVE-2007-3816 20070716 WhitePapers By SecNiche Security  View
284697 55960 CVE-2007-3816 20070721 Re: [WEB SECURITY] [CVE-2007-3816][Advisory] JWIG Context-Dependent Template Calling Dos  View
284698 55960 CVE-2007-3816 24974  View
284699 55960 CVE-2007-3816 1018432  View
284700 55960 CVE-2007-3816 jwig-externaltemplate-dos(35515)  View

Related JVN