{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-05-06T09:22:56.157","vulnerabilities":[{"cve":{"id":"CVE-2018-1000998","sourceIdentifier":"cve@mitre.org","published":"2019-02-04T21:29:00.300","lastModified":"2024-11-21T03:40:36.827","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeBSD CVSweb version 2.x contains a Cross Site Scripting (XSS) vulnerability in all pages that can result in limited impact--CVSweb is anonymous & read-only. It might impact other sites on same domain. This attack appears to be exploitable via victim must load specially crafted url. This vulnerability appears to have been fixed in 3.x."},{"lang":"es","value":"FreeBSD CVSweb, en versiones 2.x, contiene una vulnerabilidad Cross-Site Scripting (XSS) en todas las páginas que puede resultar en un impacto limitado: CVSweb es anónimo y de solo lectura. Podría impactar sobre otrtos sitios en el mismo dominio. Este ataque parece ser explotable mediante una víctima que cargue una URL especialmente manipulada. La vulnerabilidad parece haber sido solucionada en las versiones 3.x."}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freebsd:cvsweb:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.4","versionEndIncluding":"2.0.6","matchCriteriaId":"B0DE9515-5AA9-4A18-8E0E-FB6BBC468647"}]}]}],"references":[{"url":"https://www.kvakil.me/posts/cvsweb/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.kvakil.me/posts/cvsweb/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}}]}