CVE-2011-3344CWE-79

Spacewalk: spacewalk: cross-site scripting via uri in lookup login/password form

Medium · published February 5, 2014

CVSS v3.1
5.4
EPSS
1%
Percentile
73.4
In the wild
Unconfirmed
What it is

A flaw was found in Spacewalk. A remote attacker can exploit a cross-site scripting (XSS) vulnerability in the Lookup Login/Password form by injecting arbitrary web script or HTML via the URI. This can lead to information disclosure or unauthorized actions within the user's browser session.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01468 · 73.4th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2014-02-05T18:00Z
EPSS history
Timeline
  • 05 FEB 18:00Z
    Spacewalk: spacewalk: cross-site scripting via uri in lookup login/password form
    cvelistv5