Debian/sarg: unknown

Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header, which is not proper

Action: Upgrade sarg to 2.2.5-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2008-1168#Debian:13/sarg
• https://security-tracker.debian.org/tracker/CVE-2008-1168

published 2008-03-05T23:44:00Z · modified 2026-10-23T17:47:39.682661704Z · JSON