Stay Secure with the Latest Linux Advisories

security advisorymoderatesecurity issue

Mageia 8: MGASA-2022-0461 Moderate Vulnerability in AWStats XSS Risk

AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks. (CVE-2022-46391) References: - https://bugs.mageia.org/show_bug.cgi?id=31230 . MGASA-2022-0461 - Updated awstats packages fix security vulnerability Publication date: 13 Dec 2022 URL: https://advisories.mageia.org/MGASA-2022-0461.html Type: security Affected Mageia releases: 8 CVE: CVE-2022-46391 AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks. (CVE-2022-46391) References: - https://bugs.mageia.org/show_bug.cgi?id=31230 - https://lists.debian.org/debian-lts-announce/2022/12/msg00010.html - https://www.cve.org/CVERecord?id=CVE-2022-46391 SRPMS: - 8/core/awstats-7.8-2.1.mga8 . AWStats 7.x encountered a Cross-Site Scripting (XSS) vulnerability triggered by insufficient validation in the hostinfo module. An upgrade is necessary to address this vulnerability.. AWStats, Mageia, XSS Exploit, Security Patch. . LinuxSecurity.com Team

Dec 13, 2022 Mageia