VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 21, 2009· Updated Jun 16, 2026

CVE-2008-7017

CVE-2008-7017

Description

Cross-site scripting (XSS) vulnerability in analyse.php in CAcert 20080921, and possibly other versions before 20080928, allows remote attackers to inject arbitrary web script or HTML via the CN (CommonName) field in the subject of an X.509 certificate.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Cacert/Cacert2 versions
    cpe:2.3:a:cacert:cacert:20080921:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cacert:cacert:20080921:*:*:*:*:*:*:*
    • (no CPE)range: <20080928

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.