CVE-2003-0154: XSS
Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to showcheckins.cgi, (5) the module parameter to cvsqueryform.cgi, and (6) possibly other attack vectors as identified by Mozilla bug #146244.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0154?
CVE-2003-0154 is considered a high severity vulnerability due to its potential for remote code execution through cross-site scripting.
How do I fix CVE-2003-0154?
To fix CVE-2003-0154, update Mozilla Bonsai to version 1.3 or apply relevant patches provided by your software vendor.
Which versions of Mozilla Bonsai are affected by CVE-2003-0154?
CVE-2003-0154 affects version 1.3 of Mozilla Bonsai.
What types of attacks can be performed using CVE-2003-0154?
CVE-2003-0154 can be exploited to execute arbitrary web scripts, leading to potential data theft or unauthorized actions on behalf of the user.
Is CVE-2003-0154 a cross-site scripting vulnerability?
Yes, CVE-2003-0154 specifically involves cross-site scripting (XSS) vulnerabilities in the Bonsai CVS query tool.