CVE catalog

CVE-2002-1037

dcl: CVE-2002-1037

[CVE catalog]

Severity
Low
Source
[NVD] · [CVE record]
EPSS
1.86% · Oct 25, 2026

Cross-site scripting vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to inject arbitrary HTML, including script, into web pages via the (1) Ticket# Find, (2) Priorities, (3) Severities, (4) Projects, (5) WO# Find, (6) Departments and (7) Users features.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiandclsid7.5.3-1not affected
Debiandclforky7.5.3-1not affected
Debiandcltrixie7.5.2-1not affected
Debiandclbookworm7.5.1-1not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
DebiandclsourcesidNot affectedunimportantNot reportedNot reported
DebiandclsourceforkyNot affectedunimportantNot reportedNot reported
DebiandclsourcetrixieNot affectedunimportantNot reportedNot reported
DebiandclsourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [dcl-f77]Not affected

    Source package: [dcl]

    Details (2)
    • 7.5.1-1 · all · bookworm

      Not affected

      dsa · dcl · debian · bookworm

    • 7.5.1-1 · all · bookworm

      Not affected

      dsa · dcl · debian · bookworm

  • [dcl-f77-docs]Not affected

    Source package: [dcl]

    Details (2)
    • 7.5.1-1 · all · bookworm

      Not affected

      dsa · dcl · debian · bookworm

    • 7.5.1-1 · all · bookworm

      Not affected

      dsa · dcl · debian · bookworm

  • [fonts-dclfonts]Not affected

    Source package: [dcl]

    Details (2)
    • 7.5.1-1 · all · bookworm

      Not affected

      dsa · dcl · debian · bookworm

    • 7.5.1-1 · all · bookworm

      Not affected

      dsa · dcl · debian · bookworm

  • [libf77dcl7]Not affected

    Source package: [dcl]

    Details (2)
    • 7.5.1-1 · amd64 · bookworm

      Not affected

      dsa · dcl · debian · bookworm

    • 7.5.1-1 · arm64 · bookworm

      Not affected

      dsa · dcl · debian · bookworm

  • [libf77dcl-dev]Not affected

    Source package: [dcl]

    Details (2)
    • 7.5.1-1 · amd64 · bookworm

      Not affected

      dsa · dcl · debian · bookworm

    • 7.5.1-1 · arm64 · bookworm

      Not affected

      dsa · dcl · debian · bookworm

Observed:

References