Vulnerability Details CVE-2016-1143
Cross-site scripting (XSS) vulnerability in main.rb in Vine MV before 2015-11-08 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.1%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
- http://jvn.jp/en/jp/JVN12165579/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2016-000016
- https://github.com/ikeay/vinemv/commit/f41efbcac1f9262a161ebc1babfcf55fae9e939a
- http://jvn.jp/en/jp/JVN12165579/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2016-000016
- https://github.com/ikeay/vinemv/commit/f41efbcac1f9262a161ebc1babfcf55fae9e939a
Products affected by CVE-2016-1143
-
cpe:2.3:a:vine_mv_project:vine_mv:2015-09-09