CVE-2011-3361
EPSS 2.5%
Description
Cross-site scripting (XSS) vulnerability in CGI/Browse.pm in BackupPC 3.2.0 and possibly other versions before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a browse action to index.cgi.
How to fix CVE-2011-3361
To remediate CVE-2011-3361, upgrade the affected package to a fixed version below.
- Debian/backuppc—upgrade to 3.2.1-2 or later
Is CVE-2011-3361 being exploited?
Low — EPSS is 2.5%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 3.2.1-2