{"api_version":"1","generated_at":"2026-07-23T04:02:39+00:00","cve":"CVE-2001-1352","urls":{"html":"https://cve.report/CVE-2001-1352","api":"https://cve.report/api/cve/CVE-2001-1352.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2001-1352","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2001-1352"},"summary":{"title":"CVE-2001-1352","description":"Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users via an error message that is returned when an invalid index file is specified in the idxname parameter.","state":"PUBLISHED","assigner":"mitre","published_at":"2001-12-27 05:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.osvdb.org/5691","name":"http://www.osvdb.org/5691","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"404 Not Found","mime":"text/html","httpstatus":"404","archivestatus":"403"},{"url":"http://marc.info/?l=bugtraq&m=101068116016472&w=2","name":"http://marc.info/?l=bugtraq&m=101068116016472&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'Details on the updated namazu packages that are available' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://marc.info/?l=bugtraq&m=100947261916155&w=2","name":"http://marc.info/?l=bugtraq&m=100947261916155&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'Re: [RHSA-2001:162-04] Updated namazu packages are available' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"503"},{"url":"http://marc.info/?l=bugtraq&m=101060476404565&w=2","name":"http://marc.info/?l=bugtraq&m=101060476404565&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'[RHSA-2001:179-05] Updated namazu packages are available' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"503"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7875","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7875","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"503"},{"url":"https://www.cve.org/CVERecord?id=CVE-2001-1352","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2001-1352","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2001","cve_id":"1352","vulnerable":"1","versionEndIncluding":"2.0.9","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"namazu","cpe5":"namazu","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T04:51:08.402Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20020109 Details on the updated namazu packages that are available","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=101068116016472&w=2"},{"name":"linux-namazu-css(7875)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7875"},{"name":"5691","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/5691"},{"name":"20011227 Re: [RHSA-2001:162-04] Updated namazu packages are available","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=100947261916155&w=2"},{"name":"RHSA-2001:179","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=101060476404565&w=2"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2001-12-27T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users via an error message that is returned when an invalid index file is specified in the idxname parameter."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2004-08-18T00:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"20020109 Details on the updated namazu packages that are available","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=101068116016472&w=2"},{"name":"linux-namazu-css(7875)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7875"},{"name":"5691","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/5691"},{"name":"20011227 Re: [RHSA-2001:162-04] Updated namazu packages are available","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=100947261916155&w=2"},{"name":"RHSA-2001:179","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://marc.info/?l=bugtraq&m=101060476404565&w=2"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2001-1352","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users via an error message that is returned when an invalid index file is specified in the idxname parameter."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20020109 Details on the updated namazu packages that are available","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=101068116016472&w=2"},{"name":"linux-namazu-css(7875)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/7875"},{"name":"5691","refsource":"OSVDB","url":"http://www.osvdb.org/5691"},{"name":"20011227 Re: [RHSA-2001:162-04] Updated namazu packages are available","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=100947261916155&w=2"},{"name":"RHSA-2001:179","refsource":"REDHAT","url":"http://marc.info/?l=bugtraq&m=101060476404565&w=2"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2001-1352","datePublished":"2004-09-01T04:00:00.000Z","dateReserved":"2002-06-02T00:00:00.000Z","dateUpdated":"2024-08-08T04:51:08.402Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2001-12-27 05:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:namazu:namazu:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.9","matchCriteriaId":"ECC217CB-23A3-457D-81B5-368B62F06E0E"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2001","CveId":"1352","Ordinal":"1","Title":"CVE-2001-1352","CVE":"CVE-2001-1352","Year":"2001"},"notes":[{"CveYear":"2001","CveId":"1352","Ordinal":"1","NoteData":"Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users via an error message that is returned when an invalid index file is specified in the idxname parameter.","Type":"Description","Title":"CVE-2001-1352"},{"CveYear":"2001","CveId":"1352","Ordinal":"2","NoteData":"2004-09-01","Type":"Other","Title":"Published"},{"CveYear":"2001","CveId":"1352","Ordinal":"3","NoteData":"2004-08-17","Type":"Other","Title":"Modified"}]}}}