CVE-2007-0896

MEDIO 4.3CVE-2007-0896 · Published 13/02/2007 · updated 19/10/2026

En resumen

CVE-2007-0896 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a sage (sage).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.7%, mayor que el 86.1% de las vulnerabilidades.
Solución: actualizar a 1.3.10 o posterior.

Package	Affected versions	Patched versions
sage sage	`< 1.3.10`	`1.3.10`

Description

Cross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and (2) Sage++ extensions for Firefox, allows remote attackers to inject arbitrary web script or HTML via a "<SCRIPT/=''SRC='" sequence in an RSS feed, a different vulnerability than CVE-2006-4712.

References

jvn.jp/jp/JVN%2384430861/index.html · Vendor Advisory
mozdev.org/bugs/show_bug.cgi · Broken Link
osvdb.org/33131 · Broken Link
sage.mozdev.org/blog/archives/2007/1/sage_1_3_10_released.html · Broken Link
secunia.com/advisories/24086 · Vendor Advisory
securityfocus.com/bid/22493 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/32395 · Third Party Advisory

Más vulnerabilidades de sage

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free