CVE-2008-5720 Mayaa Cross-site Scripting vulnerability
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| com.github.seasarorg.mayaa/mayaa(Maven) | < 1.1.23 | 1.1.23 |
| seasar mayaa | <= 1.1.22 | No fix listed |
| seasar mayaa | = 0.1.0 | No fix listed |
| seasar mayaa | = 0.1.0f | No fix listed |
| seasar mayaa | = 0.1.1 | No fix listed |
| seasar mayaa | = 0.1.2 | No fix listed |
| seasar mayaa | = 0.1.3 | No fix listed |
| seasar mayaa | = 0.2.0 | No fix listed |
| seasar mayaa | = 0.3.0 | No fix listed |
| seasar mayaa | = 0.4.0 | No fix listed |
| seasar mayaa | = 0.9.0 | No fix listed |
| seasar mayaa | = 0.9.1 | No fix listed |
| seasar mayaa | = 0.9.2 | No fix listed |
| seasar mayaa | = 0.9.3 | No fix listed |
| seasar mayaa | = 0.9.4 | No fix listed |
| seasar mayaa | = 0.9.5 | No fix listed |
| seasar mayaa | = 0.9.6 | No fix listed |
| seasar mayaa | = 0.9.7 | No fix listed |
| seasar mayaa | = 0.9.7.1 | No fix listed |
| seasar mayaa | = 0.9.8 | No fix listed |
| seasar mayaa | = 0.9.9 | No fix listed |
| seasar mayaa | = 0.9.10 | No fix listed |
| seasar mayaa | = 0.9.11 | No fix listed |
| seasar mayaa | = 0.9.12 | No fix listed |
| seasar mayaa | = 0.9.13 | No fix listed |
Show 44 more
| Product | Affected versions | Fixed in |
|---|---|---|
| seasar mayaa | = 0.9.14 | No fix listed |
| seasar mayaa | = 0.9.15 | No fix listed |
| seasar mayaa | = 0.9.16 | No fix listed |
| seasar mayaa | = 0.9.17 | No fix listed |
| seasar mayaa | = 0.9.18 | No fix listed |
| seasar mayaa | = 0.9.19 | No fix listed |
| seasar mayaa | = 0.9.20 | No fix listed |
| seasar mayaa | = 0.9.20a | No fix listed |
| seasar mayaa | = 1.0.0 | No fix listed |
| seasar mayaa | = 1.0.0-beta1 | No fix listed |
| seasar mayaa | = 1.0.0-beta2 | No fix listed |
| seasar mayaa | = 1.0.0-beta3 | No fix listed |
| seasar mayaa | = 1.0.0-rc1 | No fix listed |
| seasar mayaa | = 1.0.1 | No fix listed |
| seasar mayaa | = 1.0.2 | No fix listed |
| seasar mayaa | = 1.0.3 | No fix listed |
| seasar mayaa | = 1.1.0 | No fix listed |
| seasar mayaa | = 1.1.0-beta1 | No fix listed |
| seasar mayaa | = 1.1.0-beta2 | No fix listed |
| seasar mayaa | = 1.1.0-beta3 | No fix listed |
| seasar mayaa | = 1.1.0-beta4 | No fix listed |
| seasar mayaa | = 1.1.0-beta5 | No fix listed |
| seasar mayaa | = 1.1.0-beta6 | No fix listed |
| seasar mayaa | = 1.1.1 | No fix listed |
| seasar mayaa | = 1.1.2 | No fix listed |
| seasar mayaa | = 1.1.3 | No fix listed |
| seasar mayaa | = 1.1.4 | No fix listed |
| seasar mayaa | = 1.1.5 | No fix listed |
| seasar mayaa | = 1.1.6 | No fix listed |
| seasar mayaa | = 1.1.7 | No fix listed |
| seasar mayaa | = 1.1.8 | No fix listed |
| seasar mayaa | = 1.1.9 | No fix listed |
| seasar mayaa | = 1.1.10 | No fix listed |
| seasar mayaa | = 1.1.11 | No fix listed |
| seasar mayaa | = 1.1.12 | No fix listed |
| seasar mayaa | = 1.1.13 | No fix listed |
| seasar mayaa | = 1.1.14 | No fix listed |
| seasar mayaa | = 1.1.15 | No fix listed |
| seasar mayaa | = 1.1.16 | No fix listed |
| seasar mayaa | = 1.1.17 | No fix listed |
| seasar mayaa | = 1.1.18 | No fix listed |
| seasar mayaa | = 1.1.19 | No fix listed |
| seasar mayaa | = 1.1.20 | No fix listed |
| seasar mayaa | = 1.1.21 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- mayaa-errorpage-xss(47623) vdb-entry
- github.com product
- web.archive.org
- web.archive.org
- JVN#17298485 third-party-advisory
- JVNDB-2008-000085 third-party-advisory
- mayaa.seasar.org
- github.com
- 51007 vdb-entry
- 33333 third-party-advisory
- 33015 vdb-entry