CVE-2018-1000998
FreeBSD CVSweb version 2.x contains a Cross Site Scripting (XSS) vulnerability in all pages that can result in limited i
FreeBSD CVSweb version 2.x contains a Cross Site Scripting (XSS) vulnerability in all pages that can result in limited impact--CVSweb is anonymous & read-only. It might impact other sites on same domain. This attack appears to be exploitable via victim must load specially crafted url.
This vulnerability appears to have been fixed in 3.x.
MEDIUM · CVSS 6.1
EPSS 0.00262
Schedule remediation
- Public exploit or PoC is available
Sigma rules0
YARA rules0