CVE-2007-6306

{"id": "CVE-2007-6306", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2007-12-11T21:46:00.000", "references": [{"url": "http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/branches/jfreechart-1.0.8-security/NEWS?r1=679&r2=680", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/trunk/source/org/jfree/chart/entity/ChartEntity.java?r1=662&r2=661&pathrev=662", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/trunk/source/org/jfree/chart/imagemap/ImageMapUtilities.java?r1=662&r2=661&pathrev=662", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://osvdb.org/41843", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/41844", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/41845", "source": "cve@mitre.org"}, {"url": "http://rhn.redhat.com/errata/RHSA-2008-0630.html", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/27959", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/31493", "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/3430", "source": "cve@mitre.org"}, {"url": "http://www.rapid7.com/advisories/R7-0031.jsp", "source": "cve@mitre.org"}, {"url": "http://www.redhat.com/support/errata/RHSA-2008-0151.html", "source": "cve@mitre.org"}, {"url": "http://www.redhat.com/support/errata/RHSA-2008-0158.html", "source": "cve@mitre.org"}, {"url": "http://www.redhat.com/support/errata/RHSA-2008-0213.html", "source": "cve@mitre.org"}, {"url": "http://www.redhat.com/support/errata/RHSA-2008-0261.html", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/484709/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/26752", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38922", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la caracter\u00edstica de trazo de plano de una imagen en JFreeChart 1.0.8 permite a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s de (1) un nombre de traza o (2) herramienta de texto gr\u00e1fico; o los atributos (3) href, (4) shape, o (5) coords de un \u00e1rea de traza."}], "lastModified": "2018-10-15T21:51:53.047", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:jfree:jfreechart:1.0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E3972FA8-57E2-4C8B-B8F3-4130FF78D4D2"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}