UBUNTU-CVE-2018-13065: modsecurity-apache Ubuntu
CVSS: 6.1v3.0MediumPublished
Published 03-07-2018Last modified 03-07-2018
Vulnerability summary
UBUNTU-CVE-2018-13065 is a medium (CVSS 6.1) vulnerability in modsecurity-apache Ubuntu.
CVSS score
6.1/10
010
Medium · v3.0 (OSV · Ubuntu), selected by version preferenceEPSS score
Not scored
0%100%
No EPSS score yetKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 03-07-2018PublishedVulnerability first disclosed.
Description
** DISPUTED ** ModSecurity 3.0.0 has XSS via an onerror attribute of an IMG element. NOTE: a third party has disputed this issue because it may only apply to environments without a Core Rule Set configured.
CVSS metrics
1 score · 1 source · 1 versionMedium 6.1Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NSourcesSingle source
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu1 product
- modsecurity-apacheAll versions (No fix recorded)
1 vendor · 1 product