CVE-2008-3023

{"id": "CVE-2008-3023", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2008-07-07T17:41:00.000", "references": [{"url": "http://fswiki.org/wiki.pl?page=%CD%FA%CE%F2%2F2008-7-3", "source": "cve@mitre.org"}, {"url": "http://jvn.jp/en/jp/JVN77432756/index.html", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://jvn.jp/jp/JVN77432756/index.html", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000036.html", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/30923", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/30071", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43574", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.6.2 and earlier, and 3.6.3 dev3 and earlier development versions, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2005-1799."}, {"lang": "es", "value": "Vulnerabilidad de ejecuci\u00f3n de comandos en sitios cruzados (XSS) en FreeStyle Wiki 3.6.2 y anteriores, y 3.6.3 dev3 y versiones de desarrollo previas, cuando se visualizan con Internet Explorer, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elecci\u00f3n a trav\u00e9s de vectores no especificados, una cuesti\u00f3n distinta de CVE-2005-1799."}], "lastModified": "2023-11-07T02:02:22.923", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fswiki:freestyle_wiki:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8F0124D3-3ABC-4E74-80BC-1A835A4030C0", "versionEndIncluding": "3.6.2"}, {"criteria": "cpe:2.3:a:fswiki:freestyle_wiki:*:dev3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5E03A17-D94B-4076-8C18-45A39E1C85B2", "versionEndIncluding": "3.6.3"}, {"criteria": "cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8682FAF3-98E3-485C-89CB-C0358C4E2AB0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}