UBUNTU-CVE-2018-8035
Dashboard / Vulnerabilities / UBUNTU-CVE-2018-8035
Summary:
Details: This vulnerability relates to the user's browser processing of DUCC webpage input data.The javascript comprising Apache UIMA DUCC (<= 2.2.2) which runs in the user's browser does not sufficiently filter user supplied inputs, which may result in unintended execution of user supplied javascript code.
References: https://ubuntu.com/security/CVE-2018-8035, https://uima.apache.org/security_report, https://www.cve.org/CVERecord?id=CVE-2018-8035
Affected packages
Package
Name: uimaj
Purl: pkg:deb/ubuntu/uimaj?arch=source&distro=xenial
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -None
Affected versions
2.7.0-1
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
