CVE-2007-6306

NameCVE-2007-6306
DescriptionMultiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs456148

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
libjfreechart-java (PTS)jessie1.0.13-7fixed
buster, stretch1.0.19-2fixed
sid, trixie, bullseye, bookworm1.0.19-3fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
libjfreechart-javasource(unstable)1.0.9-1low456148

Notes

[sarge] - libjfreechart-java <no-dsa> (Contrib not supported)

Search for package or bug name: Reporting problems