CVE-2008-5304: XSS
Published Dec 10, 2008
·Updated
Cross-site scripting (XSS) vulnerability in TWiki before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via the %URLPARAM{}% variable.
Affected Software
21 affected components
Twiki TWiki<=4.2.3
Twiki TWiki=4.0.0
Twiki TWiki=4.0.1
Twiki TWiki=4.0.2
Twiki TWiki=4.0.3
Twiki TWiki=4.0.4
Twiki TWiki=4.0.5
Twiki TWiki=4.1.0
Twiki TWiki=4.1.1
Twiki TWiki=4.1.2
Twiki TWiki=4.2.0
Twiki TWiki=4.2.1
Twiki TWiki=4.2.2
Twiki TWiki=2000-12-01
Twiki TWiki=2001-09-01
Twiki TWiki=2001-12-01
Twiki TWiki=2003-02-01
Twiki TWiki=2004-09-01
Twiki TWiki=2004-09-02
Twiki TWiki=2004-09-03
Twiki TWiki=2004-09-04
Remediation
Event History
Dec 10, 2008
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-5304?
CVE-2008-5304 is classified as a high severity cross-site scripting (XSS) vulnerability affecting certain versions of TWiki.
2
How do I fix CVE-2008-5304?
To fix CVE-2008-5304, upgrade to TWiki version 4.2.4 or later, which includes a patch for this vulnerability.
3
Which versions of TWiki are affected by CVE-2008-5304?
CVE-2008-5304 affects TWiki versions prior to 4.2.4, including several older releases.
4
What type of attack can be carried out using CVE-2008-5304?
CVE-2008-5304 allows remote attackers to execute arbitrary web scripts or HTML on affected TWiki pages.
5
Is CVE-2008-5304 a known vulnerability?
Yes, CVE-2008-5304 is a recognized vulnerability and is documented in various security advisories.