CVEvulnerability
CVE-2016-4561
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-05-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message.
Affected configurations
• ikiwiki ikiwiki (<= 3.20160121)
• debian debian linux 8.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://ikiwiki.info/security/#index43h2 Vendor Advisory
- http://source.ikiwiki.branchable.com/?p=source.git%3Ba=commitdiff%3Bh=32ef584dc5abb6ddb9f794f94ea0b2934967bba7 source.ikiwiki.branchable.com
- http://www.debian.org/security/2016/dsa-3571 www.debian.org
- http://ikiwiki.info/security/#index43h2 Vendor Advisory
- http://source.ikiwiki.branchable.com/?p=source.git%3Ba=commitdiff%3Bh=32ef584dc5abb6ddb9f794f94ea0b2934967bba7 source.ikiwiki.branchable.com
- http://www.debian.org/security/2016/dsa-3571 www.debian.org