vulnerability

Ubuntu: USN-3709-1 (CVE-2018-0499): Xapian-core vulnerability

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Jul 2, 2018
Added
Jul 17, 2018
Modified
Nov 8, 2024

Description

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet().

Solution(s)

ubuntu-upgrade-libxapian30ubuntu-upgrade-xapian-tools
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.