CVE-2007-0791

EPSS 0.79%
Published 06.02.2007 19:28:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Cross-site scripting (XSS) vulnerability in Atom feeds in Bugzilla 2.20.3, 2.22.1, and 2.23.3, and earlier versions down to 2.20.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products Warnungen 0 Metrics 2 CWE 0 References 12

Data is provided by the National Vulnerability Database (NVD)

Mozilla ≫ Bugzilla Version2.20.1

Mozilla ≫ Bugzilla Version2.20.2

Mozilla ≫ Bugzilla Version2.20.3

Mozilla ≫ Bugzilla Version2.21

Mozilla ≫ Bugzilla Version2.21.1

Mozilla ≫ Bugzilla Version2.21.2

Mozilla ≫ Bugzilla Version2.22

Mozilla ≫ Bugzilla Version2.22 Updaterc1

Mozilla ≫ Bugzilla Version2.22.1

Mozilla ≫ Bugzilla Version2.23.2

Mozilla ≫ Bugzilla Version2.23.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.79%	0.731

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

http://osvdb.org/33090

http://secunia.com/advisories/24031

http://securityreason.com/securityalert/2222

http://securitytracker.com/id?1017585

http://www.bugzilla.org/security/2.20.3/

Vendor Advisory

http://www.securityfocus.com/archive/1/459025/100/0/threaded

http://www.securityfocus.com/bid/22380

http://www.vupen.com/english/advisories/2007/0477

https://exchange.xforce.ibmcloud.com/vulnerabilities/32248

https://nvd.nist.gov/vuln/detail/CVE-2007-0791

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-0791

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-0791

EUVD