Medium severity · published Dec 23, 2023
CVE-2014-125108
A vulnerability was found in w3c online-spellchecker-py up to 20140130
6.1
CVSS
0.5%
EPSS
No
On KEV
Description
A vulnerability was found in w3c online-spellchecker-py up to 20140130. It has been rated as problematic. This issue affects some unknown processing of the file spellchecker. The manipulation leads to cross site scripting. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The identifier of the patch is d6c21fd8187c5db2a50425ff80694149e75d722e. It is recommended to apply a patch to fix this issue. The identifier VDB-248849 was assigned to this vulnerability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 41% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Spell Checker · W3
before 2014-01-31 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-125108
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-125108
Patch
https://github.com/w3c/online-spellchecker-py/commit/d6c21fd8187c5db2a50425ff80694149e75d722e
Permissions Required
https://vuldb.com/?ctiid.248849
Third Party Advisory
https://vuldb.com/?id.248849
