Description (CNA)
An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode the template name when Privoxy is configured to servce the user-manual itself.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / privoxy | affected Privoxy 3.0.33 |
CWE
CWE-79
References
- https://www.privoxy.org/3.0.33/user-manual/whatsnew.html%2C
- https://www.privoxy.org/gitweb/?p=privoxy.git%3Ba=commit%3Bh=0e668e9409c
ADP enrichment
No English description supplied.