Apache Struts Dojo Plugin XSS Vulnerability
Multiple cross-site scripting (XSS) vulnerabilities in Dojo 0.4.1 and 0.4.2, as used in Apache Struts and other products, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) `xip_client.html` and (2) `xip_server.html` in `src/io/`.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2007-6726US | medium4.3 | — | ||
Multiple cross-site scripting (XSS) vulnerabilities in Dojo 0.4.1 and 0.4.2, as used in Apache Struts and other products, allow remote attackers to inject arbitrary web script or H… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://www.dojotoolkit.org/0-4-3-and-updated-0-4-1-0-4-2-buildsWEB
- http://www.dojotoolkit.org/2007/05/26/0-4-3-released-0-4-2-and-0-4-1-users-should-upgrade-immediatelyWEB
- http://www.dojotoolkit.org/releaseNotes/0.4.3WEB
- http://www.securityfocus.com/bid/34660WEB
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49884WEB
- https://github.com/apache/struts-archive/blob/master/plugins/struts2-dojo-pluginWEB
- https://issues.apache.org/struts/browse/WW-2134WEB
- https://nvd.nist.gov/vuln/detail/CVE-2007-6726ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan