Vulnerabilities

TI-2004-02146 CVE-2004-2274 · GHSA-xmpv-7jqr-6j8j

Unknown vulnerability in Jigsaw before 2.2.4 has unknown impact and attack vectors…

LOW 31

Unknown vulnerability in Jigsaw before 2.2.4 has unknown impact and attack vectors, possibly related to the parsing of the URI.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01307 Published 2005-07-19 No fix listed

TI-2002-01025 CVE-2002-1053 · GHSA-6g3c-9q4h-j586

Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows…

LOW 34

Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a nonexistent host followed by the script, which…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02093 Published 2003-04-02 No fix listed

TI-2002-01024 CVE-2002-1052 · GHSA-hgwf-x3rj-c9m5

Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in…

LOW 28

Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to (1) cause a denial of service using the "con" device, or (2) obtain the physical path of the server using two request…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02827 Published 2002-08-31 No fix listed

Vulnerabilities

Filters

Unknown vulnerability in Jigsaw before 2.2.4 has unknown impact and attack vectors…

Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows…

Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in…