Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-5283

ViewVC before versions 1.1.28 and 1.2.1 has a XSS vulnerability in CVS show_subdir_lastmod support. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a CVS repository exposed by an otherwise trusted ViewVC instance that also has the `show_subdir_lastmod` feature enabled. The attack vector involves files with unsafe names (names that, when embedded into an HTML stream, would cause the browser to run unwanted code), which themselves can be challenging to create. This vulnerability is patched in versions 1.2.1 and 1.1.28.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.7%
CVSS Severity
CVSS v3 Score 3.1
CVSS v2 Score 2.1
Products affected by CVE-2020-5283
  • Viewvc » Viewvc » Version: N/A
    cpe:2.3:a:viewvc:viewvc:-
  • Viewvc » Viewvc » Version: 0.3.0
    cpe:2.3:a:viewvc:viewvc:0.3.0
  • Viewvc » Viewvc » Version: 0.4.0
    cpe:2.3:a:viewvc:viewvc:0.4.0
  • Viewvc » Viewvc » Version: 0.5.0
    cpe:2.3:a:viewvc:viewvc:0.5.0
  • Viewvc » Viewvc » Version: 0.6.0
    cpe:2.3:a:viewvc:viewvc:0.6.0
  • Viewvc » Viewvc » Version: 0.7.0
    cpe:2.3:a:viewvc:viewvc:0.7.0
  • Viewvc » Viewvc » Version: 0.8
    cpe:2.3:a:viewvc:viewvc:0.8
  • Viewvc » Viewvc » Version: 0.9
    cpe:2.3:a:viewvc:viewvc:0.9
  • Viewvc » Viewvc » Version: 0.9.1
    cpe:2.3:a:viewvc:viewvc:0.9.1
  • Viewvc » Viewvc » Version: 0.9.2
    cpe:2.3:a:viewvc:viewvc:0.9.2
  • Viewvc » Viewvc » Version: 0.9.3
    cpe:2.3:a:viewvc:viewvc:0.9.3
  • Viewvc » Viewvc » Version: 0.9.4
    cpe:2.3:a:viewvc:viewvc:0.9.4
  • Viewvc » Viewvc » Version: 1.0.0
    cpe:2.3:a:viewvc:viewvc:1.0.0
  • Viewvc » Viewvc » Version: 1.0.1
    cpe:2.3:a:viewvc:viewvc:1.0.1
  • Viewvc » Viewvc » Version: 1.0.10
    cpe:2.3:a:viewvc:viewvc:1.0.10
  • Viewvc » Viewvc » Version: 1.0.11
    cpe:2.3:a:viewvc:viewvc:1.0.11
  • Viewvc » Viewvc » Version: 1.0.12
    cpe:2.3:a:viewvc:viewvc:1.0.12
  • Viewvc » Viewvc » Version: 1.0.13
    cpe:2.3:a:viewvc:viewvc:1.0.13
  • Viewvc » Viewvc » Version: 1.0.14
    cpe:2.3:a:viewvc:viewvc:1.0.14
  • Viewvc » Viewvc » Version: 1.0.2
    cpe:2.3:a:viewvc:viewvc:1.0.2
  • Viewvc » Viewvc » Version: 1.0.3
    cpe:2.3:a:viewvc:viewvc:1.0.3
  • Viewvc » Viewvc » Version: 1.0.4
    cpe:2.3:a:viewvc:viewvc:1.0.4
  • Viewvc » Viewvc » Version: 1.0.5
    cpe:2.3:a:viewvc:viewvc:1.0.5
  • Viewvc » Viewvc » Version: 1.0.6
    cpe:2.3:a:viewvc:viewvc:1.0.6
  • Viewvc » Viewvc » Version: 1.0.7
    cpe:2.3:a:viewvc:viewvc:1.0.7
  • Viewvc » Viewvc » Version: 1.0.8
    cpe:2.3:a:viewvc:viewvc:1.0.8
  • Viewvc » Viewvc » Version: 1.0.9
    cpe:2.3:a:viewvc:viewvc:1.0.9
  • Viewvc » Viewvc » Version: 1.1.0
    cpe:2.3:a:viewvc:viewvc:1.1.0
  • Viewvc » Viewvc » Version: 1.1.1
    cpe:2.3:a:viewvc:viewvc:1.1.1
  • Viewvc » Viewvc » Version: 1.1.10
    cpe:2.3:a:viewvc:viewvc:1.1.10
  • Viewvc » Viewvc » Version: 1.1.11
    cpe:2.3:a:viewvc:viewvc:1.1.11
  • Viewvc » Viewvc » Version: 1.1.12
    cpe:2.3:a:viewvc:viewvc:1.1.12
  • Viewvc » Viewvc » Version: 1.1.13
    cpe:2.3:a:viewvc:viewvc:1.1.13
  • Viewvc » Viewvc » Version: 1.1.14
    cpe:2.3:a:viewvc:viewvc:1.1.14
  • Viewvc » Viewvc » Version: 1.1.15
    cpe:2.3:a:viewvc:viewvc:1.1.15
  • Viewvc » Viewvc » Version: 1.1.16
    cpe:2.3:a:viewvc:viewvc:1.1.16
  • Viewvc » Viewvc » Version: 1.1.17
    cpe:2.3:a:viewvc:viewvc:1.1.17
  • Viewvc » Viewvc » Version: 1.1.18
    cpe:2.3:a:viewvc:viewvc:1.1.18
  • Viewvc » Viewvc » Version: 1.1.19
    cpe:2.3:a:viewvc:viewvc:1.1.19
  • Viewvc » Viewvc » Version: 1.1.2
    cpe:2.3:a:viewvc:viewvc:1.1.2
  • Viewvc » Viewvc » Version: 1.1.20
    cpe:2.3:a:viewvc:viewvc:1.1.20
  • Viewvc » Viewvc » Version: 1.1.21
    cpe:2.3:a:viewvc:viewvc:1.1.21
  • Viewvc » Viewvc » Version: 1.1.22
    cpe:2.3:a:viewvc:viewvc:1.1.22
  • Viewvc » Viewvc » Version: 1.1.23
    cpe:2.3:a:viewvc:viewvc:1.1.23
  • Viewvc » Viewvc » Version: 1.1.24
    cpe:2.3:a:viewvc:viewvc:1.1.24
  • Viewvc » Viewvc » Version: 1.1.25
    cpe:2.3:a:viewvc:viewvc:1.1.25
  • Viewvc » Viewvc » Version: 1.1.26
    cpe:2.3:a:viewvc:viewvc:1.1.26
  • Viewvc » Viewvc » Version: 1.1.27
    cpe:2.3:a:viewvc:viewvc:1.1.27
  • Viewvc » Viewvc » Version: 1.1.3
    cpe:2.3:a:viewvc:viewvc:1.1.3
  • Viewvc » Viewvc » Version: 1.1.4
    cpe:2.3:a:viewvc:viewvc:1.1.4
  • Viewvc » Viewvc » Version: 1.1.5
    cpe:2.3:a:viewvc:viewvc:1.1.5
  • Viewvc » Viewvc » Version: 1.1.6
    cpe:2.3:a:viewvc:viewvc:1.1.6
  • Viewvc » Viewvc » Version: 1.1.7
    cpe:2.3:a:viewvc:viewvc:1.1.7
  • Viewvc » Viewvc » Version: 1.1.8
    cpe:2.3:a:viewvc:viewvc:1.1.8
  • Viewvc » Viewvc » Version: 1.1.9
    cpe:2.3:a:viewvc:viewvc:1.1.9
  • Viewvc » Viewvc » Version: 1.2.0
    cpe:2.3:a:viewvc:viewvc:1.2.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved