CVE-2021-44543
Fixed in a distro release EPSS <1%
An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode the template name when Privoxy is configured to servce the user-manual itself.
Products: privoxy
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.12 | privoxy | 3.0.33-r0 |
| Alpine 3.13 | privoxy | 3.0.33-r0 |
| Alpine 3.14 | privoxy | 3.0.33-r0 |
| Alpine 3.15 | privoxy | 3.0.33-r0 |
| Alpine 3.16 | privoxy | 3.0.33-r0 |
| Alpine 3.17 | privoxy | 3.0.33-r0 |
| Alpine 3.18 | privoxy | 3.0.33-r0 |
| Alpine 3.19 | privoxy | 3.0.33-r0 |
| Alpine 3.20 | privoxy | 3.0.33-r0 |
| Alpine 3.21 | privoxy | 3.0.33-r0 |
| Alpine 3.22 | privoxy | 3.0.33-r0 |
| Alpine 3.23 | privoxy | 3.0.33-r0 |
| Alpine 3.24 | privoxy | 3.0.33-r0 |
| Arch Linux | privoxy | no fix |
| Debian 12 | privoxy | 3.0.33-1 |
| Debian 13 | privoxy | 3.0.33-1 |
| Debian 14 | privoxy | 3.0.33-1 |
| Debian 9 | privoxy | 3.0.26-3+deb9u3 |
| SUSE Package Hub 15 SP3 | privoxy | 3.0.33-bp153.2.3.1 |
| SUSE Package Hub 15 SP4 | privoxy | 3.0.33-bp154.3.3.1 |
| Ubuntu 16.04 LTS | privoxy | no fix |
| Ubuntu 18.04 LTS | privoxy | 3.0.26-5ubuntu0.3 |
| Ubuntu 20.04 LTS | privoxy | 3.0.28-2ubuntu0.2 |
| Ubuntu Pro 14.04 LTS | privoxy | no fix |
| openSUSE Leap 15.2 | privoxy | 3.0.33-bp153.2.3.1 |
| openSUSE Leap 15.3 | privoxy | 3.0.33-bp153.2.3.1 |
| openSUSE Leap 15.4 | privoxy | 3.0.33-bp154.3.3.1 |
| openSUSE Tumbleweed | privoxy | 3.0.33-1.1 |