PT-2007-7175 · Jfreechart · Jfreechart

Publicado

2007-12-11

·

Atualizado

2018-10-15

·

CVE-2007-6306

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions JFreeChart version 1.0.8
Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the image map feature. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific attributes, including the chart name, chart tool tip text, or attributes of a chart area such as href, shape, or coords.
Recommendations For JFreeChart version 1.0.8, consider disabling the image map feature until a patch is available to prevent exploitation of the XSS vulnerabilities. Restrict input for chart names, tool tip texts, and chart area attributes to minimize the risk of arbitrary script injection.

Exploit

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2007-6306
RHSA-2008:0151
RHSA-2008:0158
RHSA-2008:0213
RHSA-2008:0261
RHSA-2008:0524
RHSA-2008:0630

Produtos afetados

Jfreechart