Vulnerability in Open Source Development Network Slashcode
CVE-2002-0292
Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and authentication information from other users via Javascript in a URL, possibly in the formkey field.
EPSS: 0.013 (68.4th percentile) — read the EPSS interpretation.
Affected products
- Open_source_development_network Slashcode — versions 2.0, 2.1, 2.1.1
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID)