suse · CVE-2015-8936

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2015-8936 severity moderate: SUSE including 10 source package names (squidGuard-1.4-13.10.1, squidGuard-1.4-27.1, …), 30 product×package rows across 15 product lines (SUSE Linux Enterprise High Performance Computing 12 SP5, SUSE Linux Enterprise Server 11 SP1-TERADATA, … (15 product lines)): Fixed 30.

Description:

Cross-site scripting (XSS) vulnerability in squidGuard.cgi in squidGuard before 1.5 allows remote attackers to inject arbitrary web script or HTML via a blocked site link.