PT-2012-3350 · Cumin · Cumin

Vincent Danen · CVE-2012-1575 · Publicado 2012-04-22 · Atualizado 2023-02-13

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cumin versions prior to r5238

Description The issue involves multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The attack vectors involve widgets or pages.

Recommendations For versions prior to r5238, update to version r5238 or later to resolve the issue. As a temporary workaround, consider restricting user input in widgets and pages to minimize the risk of exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2012-1575

RHSA-2012:0476

RHSA-2012:0477

Produtos afetados

Cumin

Referências · 11

• http://secunia.com/advisories/48829 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=805712 · Nota
• https://fedorahosted.org/pipermail/cumin-developers/2012-March/000796.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74844 · Nota
• http://securitytracker.com/id?1026921 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1575 · Nota de Segurança
• https://bugzilla.redhat.com/attachment.cgi?id=571986 · Nota
• http://secunia.com/advisories/48810 · Nota
• http://rhn.redhat.com/errata/RHSA-2012-0476.html · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2012-0477.html · Aviso do Fabricante
• http://securityfocus.com/bid/53000 · Nota