CVE-2005-3758: XSS

Published Nov 22, 2005

Updated

Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via a proxystylesheet variable that contains a malicious XSLT style sheet.

Affected Software

2 affected components

Google Mini Search Appliance

Google Search Appliance

Event History

Nov 22, 2005

CVE Published

09:03 PM

Nov 23, 2005

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-3758?

CVE-2005-3758 is classified as a medium severity vulnerability due to the potential for remote attackers to execute arbitrary scripts.

How do I fix CVE-2005-3758?

To mitigate CVE-2005-3758, ensure that your Google Mini Search Appliance or Google Search Appliance is updated to the latest firmware version provided by Google.

What types of attacks can result from CVE-2005-3758?

CVE-2005-3758 can lead to cross-site scripting (XSS) attacks, allowing attackers to inject malicious JavaScript into web pages viewed by users.

Which software is affected by CVE-2005-3758?

CVE-2005-3758 affects the Google Mini Search Appliance and potentially the Google Search Appliance.

Can CVE-2005-3758 affect users' data security?

Yes, CVE-2005-3758 can compromise users' data security by enabling attackers to manipulate web content maliciously.