PT-2015-7214 · Datatables+1 · Datatables Plugin+1

Publicado 2015-12-05 · Atualizado 2020-08-31 · CVE-2015-6384

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meetings versions prior to 8.5.1 DataTables plugin versions 1.10.8 and earlier

Description The issue allows attackers to bypass intended access restrictions or inject arbitrary web script or HTML. For the DataTables plugin, this can be done via the scripts parameter to the "media/unit testing/templates/6776.php" endpoint.

Recommendations For Cisco WebEx Meetings versions prior to 8.5.1, update to version 8.5.1 or later. For DataTables plugin versions 1.10.8 and earlier, update to a version greater than 1.10.8, such as version 1.10.10.

Correção

XSS

Enumeração de Fraquezas

CWE-264

CWE-79

Identificadores relacionados

CVE-2015-6384

GHSA-4MV4-GMMF-Q382

Produtos afetados

Cisco Webex Meetings

Datatables Plugin

Referências · 14

• https://github.com/DataTables/DataTables/issues/602 · Nota
• https://github.com/DataTables/DataTables · Nota
• https://github.com/DataTables/DataTablesSrc/commit/ccf86dc5982bd8e16d · Nota
• https://github.com/DataTables/DataTablesSrc/commits/1.10.10?after=9780a3693572757d87bf70e48bd7555faf974f28+34&branch=1.10.10&qualified_name=refs%2Ftags%2F1.10.10 · Nota
• http://securityfocus.com/archive/1/536437/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-6584 · Nota de Segurança
• http://seclists.org/fulldisclosure/2015/Sep/37 · Nota
• https://osv.dev/vulnerability/GHSA-4mv4-gmmf-q382 · Aviso do Fabricante
• http://packetstormsecurity.com/files/133555/DataTables-1.10.8-Cross-Site-Scripting.html · Nota
• https://netsparker.com/cve-2015-6384-xss-vulnerability-identified-in-datatables · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-6384 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151201-wmc · Aviso do Fabricante
• http://securityfocus.com/archive/1/archive/1/536437/100/0/threaded · Nota
• https://npmjs.com/advisories/5 · Nota