Apt Cacher

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2017-7443 Apr 05, 20:59 MEDIUM PATCH This Month

apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0[ad] regular expression. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Apt Cacher Ng Apt Cacher Apt Cacher Ng Project

NVD

CVSS 3.0

6.1

EPSS

0.2%

CVE-2014-4510 Oct 06, 23:55 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in job.cc in apt-cacher-ng 0.7.26 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS CSRF Debian Apt Cacher

NVD

CVSS 2.0

4.3

EPSS

0.3%

CVE-2017-7443

EPSS 0% CVSS 6.1

MEDIUM PATCH This Month

Information Disclosure Apt Cacher Ng Apt Cacher +1

NVD

CVE-2014-4510

EPSS 0% CVSS 4.3

MEDIUM POC This Month

XSS CSRF Debian +1

NVD