PT-2012-3350 · Cumin · Cumin

Vincent Danen · Published 2012-04-22 · Updated 2023-02-13 · CVE-2012-1575

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cumin versions prior to r5238

Description The issue involves multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The attack vectors involve widgets or pages.

Recommendations For versions prior to r5238, update to version r5238 or later to resolve the issue. As a temporary workaround, consider restricting user input in widgets and pages to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2012-1575

RHSA-2012:0476

RHSA-2012:0477

Affected Products

Cumin

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2012-1575 · Security Note
• http://rhn.redhat.com/errata/RHSA-2012-0476.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-0477.html · Vendor Advisory
• http://secunia.com/advisories/48829 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=805712 · Note
• https://fedorahosted.org/pipermail/cumin-developers/2012-March/000796.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/74844 · Note
• http://securitytracker.com/id?1026921 · Note
• https://bugzilla.redhat.com/attachment.cgi?id=571986 · Note
• http://secunia.com/advisories/48810 · Note
• http://securityfocus.com/bid/53000 · Note