CVE-2008-3596: XSS
Published Aug 12, 2008
·Updated
Cross-site scripting (XSS) vulnerability in Harmoni before 1.4.7 allows remote attackers to inject arbitrary web script or HTML via the Username field, which is inserted into logs that could be rendered when viewed by an administrator.
Affected Software
44 affected components
Harmoni Harmoni<=1.4.6
Harmoni Harmoni=0.0.2-beta
Harmoni Harmoni=0.0.3-beta
Harmoni Harmoni=0.0.4
Harmoni Harmoni=0.0.5
Harmoni Harmoni=0.1.0
Harmoni Harmoni=0.2.0
Harmoni Harmoni=0.3.0
Harmoni Harmoni=0.3.1
Harmoni Harmoni=0.3.2
Harmoni Harmoni=0.5.1
Harmoni Harmoni=0.6.0
Harmoni Harmoni=0.6.2
Harmoni Harmoni=0.7.0
Harmoni Harmoni=0.7.1
Harmoni Harmoni=0.7.2
Harmoni Harmoni=0.7.6
Harmoni Harmoni=0.7.7
Harmoni Harmoni=0.9.0
Harmoni Harmoni=0.10.1
Harmoni Harmoni=0.11.0
Harmoni Harmoni=0.12.0
Harmoni Harmoni=0.12.1
Harmoni Harmoni=0.12.3
Harmoni Harmoni=0.13.0
Harmoni Harmoni=0.13.1
Harmoni Harmoni=0.13.2
Harmoni Harmoni=0.13.3
Harmoni Harmoni=0.13.4
Harmoni Harmoni=0.13.5
Harmoni Harmoni=0.13.6
Harmoni Harmoni=0.13.7
Harmoni Harmoni=1.0.0
Harmoni Harmoni=1.0.1
Harmoni Harmoni=1.0.2
Harmoni Harmoni=1.0.3
Harmoni Harmoni=1.0.5
Harmoni Harmoni=1.0.6
Harmoni Harmoni=1.1.0
Harmoni Harmoni=1.3.0
Harmoni Harmoni=1.3.2
Harmoni Harmoni=1.3.4
Harmoni Harmoni=1.3.5
Harmoni Harmoni=1.4.2
Event History
Aug 12, 2008
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-3596?
CVE-2008-3596 is considered to be of medium severity due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2008-3596?
To fix CVE-2008-3596, upgrade to Harmoni version 1.4.7 or later where the vulnerability has been patched.
3
What types of attacks can CVE-2008-3596 enable?
CVE-2008-3596 can enable remote attackers to inject arbitrary web scripts or HTML, leading to XSS attacks.
4
Which versions of Harmoni are affected by CVE-2008-3596?
CVE-2008-3596 affects all Harmoni versions prior to 1.4.7 and specific beta versions.
5
Who is impacted by CVE-2008-3596?
Administrators of systems running affected versions of Harmoni are primarily impacted by CVE-2008-3596.