Deskripsi CVE

Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 creates a clickable link for a (1) javascript: or (2) data: URI in the URL (aka bug_file_loc) field, which allows remote attackers to conduct cross-site scripting (XSS) attacks against logged-out users via a crafted URI.

Informasi CVE

Kelemahan Terkait

CWE-ID	Nama Kelemahan	Sumber
CWE-79	Improper Neutralization of Input During Web Page Generation The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	4.3		AV:N/AC:M/Au:N/C:N/I:P/A:N	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Mozilla>>Bugzilla >> Version Hingga (termasuk) 3.2.9

Mozilla>>Bugzilla >> Version 2.0

Mozilla>>Bugzilla >> Version 2.2

Mozilla>>Bugzilla >> Version 2.4

Mozilla>>Bugzilla >> Version 2.6

Mozilla>>Bugzilla >> Version 2.8

Mozilla>>Bugzilla >> Version 2.9

Mozilla>>Bugzilla >> Version 2.10

Mozilla>>Bugzilla >> Version 2.12

Mozilla>>Bugzilla >> Version 2.14

Mozilla>>Bugzilla >> Version 2.14.1

Mozilla>>Bugzilla >> Version 2.14.2

Mozilla>>Bugzilla >> Version 2.14.3

Mozilla>>Bugzilla >> Version 2.14.4

Mozilla>>Bugzilla >> Version 2.14.5

Mozilla>>Bugzilla >> Version 2.16

Mozilla>>Bugzilla >> Version 2.16.1

Mozilla>>Bugzilla >> Version 2.16.2

Mozilla>>Bugzilla >> Version 2.16.3

Mozilla>>Bugzilla >> Version 2.16.4

Mozilla>>Bugzilla >> Version 2.16.5

Mozilla>>Bugzilla >> Version 2.16.6

Mozilla>>Bugzilla >> Version 2.16.7

Mozilla>>Bugzilla >> Version 2.16.8

Mozilla>>Bugzilla >> Version 2.16.9

Mozilla>>Bugzilla >> Version 2.16.10

Mozilla>>Bugzilla >> Version 2.16.11

Mozilla>>Bugzilla >> Version 2.16_rc2

Mozilla>>Bugzilla >> Version 2.17

Mozilla>>Bugzilla >> Version 2.17.1

Mozilla>>Bugzilla >> Version 2.17.2

Mozilla>>Bugzilla >> Version 2.17.3

Mozilla>>Bugzilla >> Version 2.17.4

Mozilla>>Bugzilla >> Version 2.17.5

Mozilla>>Bugzilla >> Version 2.17.6

Mozilla>>Bugzilla >> Version 2.17.7

Mozilla>>Bugzilla >> Version 2.18

Mozilla>>Bugzilla >> Version 2.18.1

Mozilla>>Bugzilla >> Version 2.18.2

Mozilla>>Bugzilla >> Version 2.18.3

Mozilla>>Bugzilla >> Version 2.18.4

Mozilla>>Bugzilla >> Version 2.18.5

Mozilla>>Bugzilla >> Version 2.18.6

Mozilla>>Bugzilla >> Version 2.18.6\+

Mozilla>>Bugzilla >> Version 2.18.7

Mozilla>>Bugzilla >> Version 2.18.8

Mozilla>>Bugzilla >> Version 2.18.9

Mozilla>>Bugzilla >> Version 2.19

Mozilla>>Bugzilla >> Version 2.19.1

Mozilla>>Bugzilla >> Version 2.19.2

Mozilla>>Bugzilla >> Version 2.19.3

Mozilla>>Bugzilla >> Version 2.20

Mozilla>>Bugzilla >> Version 2.20.1

Mozilla>>Bugzilla >> Version 2.20.2

Mozilla>>Bugzilla >> Version 2.20.3

Mozilla>>Bugzilla >> Version 2.20.4

Mozilla>>Bugzilla >> Version 2.20.5

Mozilla>>Bugzilla >> Version 2.20.6

Mozilla>>Bugzilla >> Version 2.20.7

Mozilla>>Bugzilla >> Version 2.21

Mozilla>>Bugzilla >> Version 2.21.1

Mozilla>>Bugzilla >> Version 2.21.2

Mozilla>>Bugzilla >> Version 2.22

Mozilla>>Bugzilla >> Version 2.22.1

Mozilla>>Bugzilla >> Version 2.22.2

Mozilla>>Bugzilla >> Version 2.22.3

Mozilla>>Bugzilla >> Version 2.22.4

Mozilla>>Bugzilla >> Version 2.22.5

Mozilla>>Bugzilla >> Version 2.22.6

Mozilla>>Bugzilla >> Version 2.22.7

Mozilla>>Bugzilla >> Version 2.23

Mozilla>>Bugzilla >> Version 2.23.1

Mozilla>>Bugzilla >> Version 2.23.2

Mozilla>>Bugzilla >> Version 2.23.3

Mozilla>>Bugzilla >> Version 2.23.4

Mozilla>>Bugzilla >> Version 3.2

Mozilla>>Bugzilla >> Version 3.2.1

Mozilla>>Bugzilla >> Version 3.2.2

Mozilla>>Bugzilla >> Version 3.2.3

Mozilla>>Bugzilla >> Version 3.2.4

Mozilla>>Bugzilla >> Version 3.2.5

Mozilla>>Bugzilla >> Version 3.2.6

Mozilla>>Bugzilla >> Version 3.2.7

Mozilla>>Bugzilla >> Version 3.2.8

Mozilla>>Bugzilla >> Version 3.4.1

Mozilla>>Bugzilla >> Version 3.4.2

Mozilla>>Bugzilla >> Version 3.4.3

Mozilla>>Bugzilla >> Version 3.4.4

Mozilla>>Bugzilla >> Version 3.4.5

Mozilla>>Bugzilla >> Version 3.4.6

Mozilla>>Bugzilla >> Version 3.4.7

Mozilla>>Bugzilla >> Version 3.4.8

Mozilla>>Bugzilla >> Version 3.4.9

Mozilla>>Bugzilla >> Version 3.6.0

Mozilla>>Bugzilla >> Version 3.6.1

Mozilla>>Bugzilla >> Version 3.6.2

Mozilla>>Bugzilla >> Version 3.6.3

Mozilla>>Bugzilla >> Version 4.0

Referensi

http://www.securityfocus.com/bid/45982
Tags : vdb-entry, x_refsource_BID

http://secunia.com/advisories/43165
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.bugzilla.org/security/3.2.9/
Tags : x_refsource_CONFIRM

http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053665.html
Tags : vendor-advisory, x_refsource_FEDORA

http://www.vupen.com/english/advisories/2011/0271
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/43033
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2011/0207
Tags : vdb-entry, x_refsource_VUPEN

http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053678.html
Tags : vendor-advisory, x_refsource_FEDORA

http://osvdb.org/70704
Tags : vdb-entry, x_refsource_OSVDB

https://bugzilla.mozilla.org/show_bug.cgi?id=628034
Tags : x_refsource_CONFIRM

http://www.debian.org/security/2011/dsa-2322
Tags : vendor-advisory, x_refsource_DEBIAN

https://exchange.xforce.ibmcloud.com/vulnerabilities/65005
Tags : vdb-entry, x_refsource_XF

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.96%	–	–
2022-03-27	–	–	1.96%	–	–
2022-04-03	–	–	1.96%	–	–
2022-08-28	–	–	1.96%	–	–
2023-03-12	–	–	–	0.36%	–
2023-08-20	–	–	–	0.36%	–
2024-02-11	–	–	–	0.36%	–
2024-03-24	–	–	–	0.36%	–
2024-06-02	–	–	–	0.36%	–
2024-08-25	–	–	–	0.36%	–
2024-09-22	–	–	–	0.36%	–
2024-10-27	–	–	–	0.36%	–
2024-12-22	–	–	–	0.39%	–
2025-01-19	–	–	–	0.39%	–
2025-03-09	–	–	–	0.39%	–
2025-03-09	–	–	–	0.39%	–
2025-03-18	–	–	–	–	0.83%
2025-03-30	–	–	–	–	0.83%
2025-04-11	–	–	–	–	0.83%
2025-04-12	–	–	–	–	0.83%
2025-04-15	–	–	–	–	0.83%
2025-06-18	–	–	–	–	0.83%
2025-06-19	–	–	–	–	0.83%
2025-06-27	–	–	–	–	0.83%
2025-11-18	–	–	–	–	0.83%
2025-11-20	–	–	–	–	0.83%
2025-11-21	–	–	–	–	0.83%
2026-03-08	–	–	–	–	0.7%
2026-06-14	–	–	–	–	0.7%

Tanggal	Persentil
2022-02-06	56%
2022-03-27	57%
2022-04-03	77%
2022-08-28	78%
2023-03-12	68%
2023-08-20	69%
2024-02-11	71%
2024-03-24	72%
2024-06-02	72%
2024-08-25	73%
2024-09-22	72%
2024-10-27	73%
2024-12-22	73%
2025-01-19	73%
2025-03-09	74%
2025-03-09	74%
2025-03-18	73%
2025-03-30	72%
2025-04-11	73%
2025-04-12	72%
2025-04-15	73%
2025-06-18	74%
2025-06-19	73%
2025-06-27	74%
2025-11-18	72%
2025-11-20	73%
2025-11-21	74%
2026-03-08	72%
2026-06-14	73%

CVE-2011-0048 : Detail

CVE-2011-0048