PT-2014-2166 · Suse · Suse Studio Extension For System Z+1
Published
2014-04-16
·
Updated
2014-04-17
·
CVE-2011-4193
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
SUSE Studio Onsite versions 1.2 through 1.2.1
SUSE Studio Extension for System z versions 1.2 through 1.2.1
Description
A cross-site scripting (XSS) issue exists in the overlay files tab, allowing remote attackers to inject arbitrary web script or HTML via a crafted application. This is related to cloning.
Recommendations
For SUSE Studio Onsite version 1.2, update to version 1.2.1 to resolve the issue.
For SUSE Studio Extension for System z version 1.2, update to version 1.2.1 to resolve the issue.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Suse Studio Extension For System Z
Suse Studio Onsite