CVE-2020-11082

Katalog CVE

CVSS 6.1 · Medium EPSS 1,5%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada kaminari project kaminari, debian linux. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1.

Rincian

Terbit di NVD

28 Mei 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 74,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/kaminari/kaminari/commit/8dd52a1aed3d2fa2835d836de23fc0d8c4ff5db8 patch · advisory pihak ketiga
• https://github.com/kaminari/kaminari/security/advisories/GHSA-r5jw-62xg-j433 mitigasi · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/09/msg00011.html mailing list · advisory pihak ketiga
• https://www.debian.org/security/2021/dsa-5005 advisory pihak ketiga
• https://github.com/github/advisory-review/pull/1020 broken link