CVE-2016-2511
MEDIUMDebian Linux < 2.3.3 - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in WebSVN 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter to log.php.
References (4)
Scores
CVSS v3
6.1
EPSS
0.0054
EPSS Percentile
67.4%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Classification
CWE
CWE-79
Status
draft
Affected Products (3)
debian/debian_linux
debian/debian_linux
websvn/websvn
< 2.3.3
Timeline
Published
Apr 07, 2016
Tracked Since
Feb 18, 2026