CVE-2011-4345
EPSS 2.0%
Description
Cross-site scripting (XSS) vulnerability in Namazu before 2.0.21, when Internet Explorer 6 or 7 is used, allows remote attackers to inject arbitrary web script or HTML via a cookie.
How to fix CVE-2011-4345
To remediate CVE-2011-4345, upgrade the affected package to a fixed version below.
- Debian/namazu2—upgrade to 2.0.21-1 or later
Is CVE-2011-4345 being exploited?
Low — EPSS is 2.0%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 2.0.21-1