PT-2013-2019 · Redcap · Redcap

Publicado 2013-06-17 · Atualizado 2021-07-01 · CVE-2012-6565

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions REDCap versions prior to 4.14.3

Description A cross-site scripting issue allows remote authenticated users to inject arbitrary web script or HTML via uppercase characters in JavaScript events within user-defined labels.

Recommendations For versions prior to 4.14.3, update to version 4.14.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of uppercase characters in JavaScript events within user-defined labels until a patch is applied.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2012-6565

Produtos afetados

Redcap

Referências · 2

• http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-6565 · Nota de Segurança