CVE catalog

CVE-2004-1341

info2www: CVE-2004-1341

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.47% · Oct 27, 2026

Cross-site scripting (XSS) vulnerability in info2www before 1.2.2.9 allows remote attackers to inject arbitrary web script or HTML via the arguments to info2www.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianinfo2wwwsid1.2.2.9-29fixed
Debianinfo2wwwforky1.2.2.9-29fixed
Debianinfo2wwwtrixie1.2.2.9-27fixed
Debianinfo2wwwbookworm1.2.2.9-24.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianinfo2wwwsourcesid1.2.2.9-23not yet assignedNot reported[281655]
Debianinfo2wwwsourceforky1.2.2.9-23not yet assignedNot reported[281655]
Debianinfo2wwwsourcetrixie1.2.2.9-23not yet assignedNot reported[281655]
Debianinfo2wwwsourcebookworm1.2.2.9-23not yet assignedNot reported[281655]

[Debian bug #281655]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [info2www]Fixed
    Details (2)

    • 1.2.2.9-24.2 · all · bookworm

      Fixed · Fixed: 1.2.2.9-23

      dsa · info2www · debian · bookworm; dsa · info2www · debian · 12

    • 1.2.2.9-24.2 · all · bookworm

      Fixed · Fixed: 1.2.2.9-23

      dsa · info2www · debian · bookworm; dsa · info2www · debian · 12

[Debian 13 (Trixie)]

  • [info2www]Fixed
    Details (2)

    • 1.2.2.9-27 · all · trixie

      Fixed · Fixed: 1.2.2.9-23

      dsa · info2www · debian · 13

    • 1.2.2.9-27 · all · trixie

      Fixed · Fixed: 1.2.2.9-23

      dsa · info2www · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]