NVD

Id
83265  
Name
CVE-2017-5938  
Description
Cross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC before 1.0.14 and 1.1.x before 1.1.26 allows remote attackers to inject arbitrary web script or HTML via the nav_data name.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-05-27  
Published
2017-03-15  
Modified Date
2017-05-07  
Seq
2017-5938  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
408087 83265 CVE-2016-8298 1037636  View
409255 83265 CVE-2016-4688 94572  View
409256 83265 CVE-2016-4688 https://support.apple.com/HT207269  View
409257 83265 CVE-2016-4688 https://support.apple.com/HT207270  View
409258 83265 CVE-2016-4688 https://support.apple.com/HT207271  View
409259 83265 CVE-2016-4688 https://support.apple.com/HT207275  View
409260 83265 CVE-2016-4688 https://support.apple.com/HT207487  View
409261 83265 CVE-2016-4688 94572  View
409262 83265 CVE-2016-4688 https://support.apple.com/HT207269  View
409263 83265 CVE-2016-4688 https://support.apple.com/HT207270  View
409264 83265 CVE-2016-4688 https://support.apple.com/HT207271  View
409265 83265 CVE-2016-4688 https://support.apple.com/HT207275  View
409266 83265 CVE-2016-4688 https://support.apple.com/HT207487  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65945 JVNDB-2017-002284 ViewVC の lib/viewvc.py の nav_path 関数におけるクロスサイトスクリプティングの脆弱性 ViewVC の lib/viewvc.py の nav_path 関数には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2017-5938 CVE-2017-5938 83265 4.3 6.1 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002284.html 2017-01-25 2017-04-07 View