CVE-2016-1236 Multiple cross-site scripting (XSS) vulnerabilities in (1) revision.php, (2) log.php, (3) listing.php, and (4) comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HT...
MediumCVSS 6.1
EPSS 0.86%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in (1) revision.php, (2) log.php, (3) listing.php, and (4) comp.php in WebSVN allow context-dependent attackers to inject arbitrary web script or HTML via the name of a (a) file or (b) directory in a repository.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| websvn | All versions | No fix listed |
| debian linux | = 8.0 | No fix listed |
References
- DSA-3572 vendor-advisory
- [oss-security] 20160506 CVE-2016-1236 - XSS Vulnerability in websvn 2.3.3-1.2+deb8u1 mailing-list
- bugzilla.redhat.com