CVE-2021-44543

Name
CVE-2021-44543
Description
An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode the template name when Privoxy is configured to servce the user-manual itself.
NVD Severity
medium
Other trackers
Mailing lists
Exploits
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://www.privoxy.org/gitweb/?p=privoxy.git;a=commit;h=0e668e9409c
MISC https://www.privoxy.org/3.0.33/user-manual/whatsnew.html,

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:* privoxy >= None < 3.0.33

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
privoxy edge-main 3.0.33-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
privoxy 3.15-main 3.0.33-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
privoxy 3.14-main 3.0.33-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
privoxy 3.13-main 3.0.33-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
privoxy 3.12-main 3.0.33-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
privoxy 3.16-main 3.0.33-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
privoxy 3.17-main 3.0.33-r0 Natanael Copa <ncopa@alpinelinux.org> fixed