Vulnerability Description
Cross-site scripting (XSS) vulnerability in the Sage add-on 1.3.10 and earlier for Firefox allows remote attackers to inject arbitrary web script or HTML via a crafted feed, a different vulnerability than CVE-2009-4102.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sage-Mozdev | Sage | <= 1.3.10 |
| Mozilla | Firefox | All versions |
Related Weaknesses (CWE)
References
- http://jvn.jp/en/jp/JVN30221194/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2011-000069
- http://jvn.jp/en/jp/JVN30221194/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2011-000069
FAQ
What is CVE-2011-3384?
CVE-2011-3384 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Cross-site scripting (XSS) vulnerability in the Sage add-on 1.3.10 and earlier for Firefox allows remote attackers to inject arbitrary web script or HTML via a crafted feed, a different vulnerability ...
How severe is CVE-2011-3384?
CVE-2011-3384 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-3384?
Check the references section above for vendor advisories and patch information. Affected products include: Sage-Mozdev Sage, Mozilla Firefox.