CVE-2007-2808: GNU Gnats

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows remote attackers to inject arbitrary web script or HTML via the database parameter.

Affected products

• GNU Gnats: version 4.1.99 only
• Yngve Svendsen Gnatsweb: version 4.00 only

Published 2007-05-22. Last modified 2026-06-16.