| Vulnerability Name: | CVE-2015-2793 (CCN-172191) | ||||||||||||||||||||||||||||||||||||||||||||
| Assigned: | 2015-03-27 | ||||||||||||||||||||||||||||||||||||||||||||
| Published: | 2015-03-27 | ||||||||||||||||||||||||||||||||||||||||||||
| Updated: | 2019-12-02 | ||||||||||||||||||||||||||||||||||||||||||||
| Summary: | Cross-site scripting (XSS) vulnerability in templates/openid-selector.tmpl in ikiwiki before 3.20150329 allows remote attackers to inject arbitrary web script or HTML via the openid_identifier parameter in a verify action to ikiwiki.cgi. | ||||||||||||||||||||||||||||||||||||||||||||
| CVSS v3 Severity: | 6.1 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) 5.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:H/RL:O/RC:C)
5.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:H/RL:O/RC:C)
| ||||||||||||||||||||||||||||||||||||||||||||
| CVSS v2 Severity: | 4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
| ||||||||||||||||||||||||||||||||||||||||||||
| Vulnerability Type: | CWE-79 | ||||||||||||||||||||||||||||||||||||||||||||
| Vulnerability Consequences: | Cross-Site Scripting | ||||||||||||||||||||||||||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2015-2793 Source: MISC Type: Third Party Advisory http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157001.html Source: MISC Type: Third Party Advisory http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157023.html Source: MISC Type: Third Party Advisory http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157025.html Source: MISC Type: Mailing List, Patch, Third Party Advisory http://openwall.com/lists/oss-security/2015/03/30/5 Source: MISC Type: Mailing List, Patch, Third Party Advisory http://openwall.com/lists/oss-security/2015/03/31/1 Source: CCN Type: ikiwiki GIT Repository Fix XSS in openid selector. Thanks, Raghav Bisht Source: MISC Type: Patch http://source.ikiwiki.branchable.com/?p=source.git;a=commitdiff;h=18dfba868fe2fb9c64706b2123eb0b3a3ce66a77 Source: MISC Type: Issue Tracking, Third Party Advisory https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=781483 Source: MISC Type: Issue Tracking, Patch, Third Party Advisory https://bugzilla.redhat.com/show_bug.cgi?id=1207210 Source: XF Type: UNKNOWN ikiwiki-cve20152793-xss(172191) Source: CCN Type: Ikiwiki Web site Ikiwiki Source: MISC Type: Exploit, Vendor Advisory https://ikiwiki.info/bugs/XSS_Alert...__33____33____33__/ Source: CCN Type: WhiteSource Vulnerability Database CVE-2015-2793 | ||||||||||||||||||||||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||||||||||||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||||||||||||||||||||||