CVE-2004-1735: XSS
Published Aug 21, 2004
·Updated
Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticated users to inject arbitrary web script or HTML via the description field.
Affected Software
4 affected components
sympa sympa=4.1.1
sympa sympa=4.0
sympa sympa=4.1.2
sympa sympa=4.1
Event History
Aug 21, 2004
CVE Published
04:00 AM
Feb 26, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1735?
CVE-2004-1735 has a moderate severity rating due to its potential for allowing cross-site scripting attacks.
2
How do I fix CVE-2004-1735?
To fix CVE-2004-1735, update Sympa to the latest version available that addresses this vulnerability.
3
Who is affected by CVE-2004-1735?
CVE-2004-1735 affects users of Sympa versions 4.1.x and earlier.
4
What type of vulnerability is CVE-2004-1735?
CVE-2004-1735 is a cross-site scripting (XSS) vulnerability.
5
Can authenticated users exploit CVE-2004-1735?
Yes, remote authenticated users can exploit CVE-2004-1735 to inject arbitrary web scripts or HTML.