CVE-2002-2107 Cross-site scripting (XSS) vulnerability in the lookup script in Veridis OpenKeyServer (OKS) 1.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
MediumCVSS 4.3
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the lookup script in Veridis OpenKeyServer (OKS) 1.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| veridis openkeyserver | = 1.2 | No fix listed |
References
- openkeyserver-web-interface-css(8651) vdb-entry
- www.securiteam.com exploit vendor-advisory
- 4369 vdb-entry