CVE-2005-4454

Validate-before-filter vulnerability in cleanhtml.pl 1.129 in LiveJournal CVS before Dec 7 2005, when the cleancss option is enabled, allows remote attackers to conduct cross-site scripting (XSS) attacks via a "\" (backslash) within a "javascript" scheme in a style property (such as "javas\cript"), which bypasses the "javascript" check before the "\" is stripped and then rendered in web browsers that allow scripting in style sheets.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1000.html
http://cvs.livejournal.org/browse.cgi/livejournal/cgi-bin/cleanhtml.pl
http://marc.info/?l=full-disclosure&m=113504421421972&w=2
http://secunia.com/advisories/18157	Patch Vendor Advisory
http://www.osvdb.org/21896
http://www.securityfocus.com/bid/15990	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/23839

Configurations

Configuration 1 (hide)

cpe:2.3:a:livejournal:livejournal:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2005-12-21 11:03

Updated : 2024-02-04 16:52

NVD link : CVE-2005-4454

Mitre link : CVE-2005-4454

CVE.ORG link : CVE-2005-4454

JSON object : View

Products Affected

livejournal

livejournal

CWE

NVD-CWE-Other

{"id": "CVE-2005-4454", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-12-21T11:03:00.000", "references": [{"url": "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1000.html", "source": "cve@mitre.org"}, {"url": "http://cvs.livejournal.org/browse.cgi/livejournal/cgi-bin/cleanhtml.pl", "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=full-disclosure&m=113504421421972&w=2", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/18157", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/21896", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/15990", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/23839", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Validate-before-filter vulnerability in cleanhtml.pl 1.129 in LiveJournal CVS before Dec 7 2005, when the cleancss option is enabled, allows remote attackers to conduct cross-site scripting (XSS) attacks via a \"\\\" (backslash) within a \"javascript\" scheme in a style property (such as \"javas\\cript\"), which bypasses the \"javascript\" check before the \"\\\" is stripped and then rendered in web browsers that allow scripting in style sheets."}], "lastModified": "2017-07-20T01:29:16.067", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:livejournal:livejournal:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E3EEE8D-BFBD-4DFF-B540-993E62093381"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}