CVE-2014-3207

Cross-site scripting (XSS) vulnerability in wserver.ml in SKS Keyserver before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to pks/lookup/undefined1.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 53%
VendorProductVersion
sks_keyserver_projectsks_keyserver
𝑥
≤ 1.1.4
sks_keyserver_projectsks_keyserver
0.1.0
sks_keyserver_projectsks_keyserver
0.1.1
sks_keyserver_projectsks_keyserver
0.1.2
sks_keyserver_projectsks_keyserver
0.1.3
sks_keyserver_projectsks_keyserver
1.0.2
sks_keyserver_projectsks_keyserver
1.0.3
sks_keyserver_projectsks_keyserver
1.0.5
sks_keyserver_projectsks_keyserver
1.1.0
sks_keyserver_projectsks_keyserver
1.1.1
sks_keyserver_projectsks_keyserver
1.1.2
sks_keyserver_projectsks_keyserver
1.1.3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
sks
bullseye
1.1.6+git20210302.c3ba6d5a-3
fixed
squeeze
no-dsa
bookworm
1.1.6+git20210302.c3ba6d5a-4
fixed
sid
1.1.6+git20210302.c3ba6d5a-4.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
sks
disco
not-affected
cosmic
not-affected
bionic
not-affected
artful
not-affected
zesty
not-affected
yakkety
not-affected
xenial
not-affected
wily
not-affected
vivid
not-affected
utopic
not-affected
trusty
dne
saucy
ignored
quantal
ignored
precise
ignored
lucid
ignored
Common Weakness Enumeration
References
http://secunia.com/advisories/57965
http://www.securityfocus.com/bid/67198
https://bitbucket.org/skskeyserver/sks-keyserver/commits/88d453cdc858d1352c61a4d4a6cd5b1ac17f2724
https://bitbucket.org/skskeyserver/sks-keyserver/issue/26/unfiltered-xss
https://bugzilla.mozilla.org/show_bug.cgi?id=952077
http://secunia.com/advisories/57965
http://www.securityfocus.com/bid/67198
https://bitbucket.org/skskeyserver/sks-keyserver/commits/88d453cdc858d1352c61a4d4a6cd5b1ac17f2724
https://bitbucket.org/skskeyserver/sks-keyserver/issue/26/unfiltered-xss
https://bugzilla.mozilla.org/show_bug.cgi?id=952077