Insufficient sanitization of the query parameter in templates/html/search_opensearch.php could lead to reflected cross-site scripting or iframe injection.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade doxygenUpgrade doxygen-debuginfoUpgrade doxygen-latexUpgrade doxygen-doxywizard | Oct 28, 2020 | May 24, 2019 |
| Amazon_linux | — | Upgrade doxygen | Jul 30, 2020 | May 24, 2019 |
| Centos_linux | — | Upgrade doxygen-doxywizardUpgrade doxygenUpgrade doxygen-debuginfoUpgrade doxygen-latex | Apr 1, 2020 | May 24, 2019 |
| Debian | — | Upgrade doxygen | Jun 3, 2019 | May 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade doxygen | Feb 22, 2021 | May 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade doxygen | Apr 30, 2021 | May 24, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade doxygen | Feb 3, 2021 | May 24, 2019 |
| Oracle_linux | — | Upgrade doxygenUpgrade doxygen-latexUpgrade doxygen-doxywizard | Oct 5, 2022 | May 24, 2019 |
| Redhat_linux | — | Upgrade doxygen-doxywizardUpgrade doxygen-debuginfoUpgrade doxygenUpgrade doxygen-latex | Apr 1, 2020 | May 24, 2019 |
| Suse | — | Upgrade doxygen | Jun 2, 2019 | May 24, 2019 |
| Ubuntu | — | Upgrade doxygen | Jun 3, 2019 | May 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub