CVE-2007-0791

Description

Cross-site scripting (XSS) vulnerability in Atom feeds in Bugzilla 2.20.3, 2.22.1, and 2.23.3, and earlier versions down to 2.20.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/32248

http://www.vupen.com/english/advisories/2007/0477

http://www.securityfocus.com/bid/22380

http://www.securityfocus.com/archive/1/459025/100/0/threaded

http://www.bugzilla.org/security/2.20.3/

http://securitytracker.com/id?1017585

http://securityreason.com/securityalert/2222

http://secunia.com/advisories/24031

http://osvdb.org/33090

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS