Vulnerability Description
Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a nonexistent host followed by the script, which is included in the resulting error message.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| W3C | Jigsaw | 2.2 |
References
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0190.html
- http://www.iss.net/security_center/static/9914.phpPatchVendor Advisory
- http://www.osvdb.org/4015
- http://www.securityfocus.com/bid/5506PatchVendor Advisory
- http://www.w3.org/Jigsaw/RelNotes.html#2.2.1
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0190.html
- http://www.iss.net/security_center/static/9914.phpPatchVendor Advisory
- http://www.osvdb.org/4015
- http://www.securityfocus.com/bid/5506PatchVendor Advisory
- http://www.w3.org/Jigsaw/RelNotes.html#2.2.1
FAQ
What is CVE-2002-1053?
CVE-2002-1053 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a nonexistent host followed ...
How severe is CVE-2002-1053?
CVE-2002-1053 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2002-1053?
Check the references section above for vendor advisories and patch information. Affected products include: W3C Jigsaw.