CVE-2012-2237

Опубликовано: 17 дек. 2019

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.3 and 1.5.x before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) javascript innerHTML as used when generating login forms, (2) links or (3) resources URLs, and (4) the Display name in a user profile.

Ссылки

http://www.debian.org/security/2012/dsa-2540
Third Party Advisory
https://bugs.launchpad.net/mahara/+bug/1009774
Exploit
Third Party Advisory
https://bugs.launchpad.net/mahara/+bug/1009777
Exploit
Third Party Advisory
https://bugs.launchpad.net/mahara/+bug/1009784
Exploit
Patch
Third Party Advisory
https://mahara.org/interaction/forum/topic.php?id=4748
Patch
Vendor Advisory
http://www.debian.org/security/2012/dsa-2540
Third Party Advisory
https://bugs.launchpad.net/mahara/+bug/1009774
Exploit
Third Party Advisory
https://bugs.launchpad.net/mahara/+bug/1009777
Exploit
Third Party Advisory
https://bugs.launchpad.net/mahara/+bug/1009784
Exploit
Patch
Third Party Advisory
https://mahara.org/interaction/forum/topic.php?id=4748
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*

Версия от 1.4.0 (включая) до 1.4.3 (исключая)

cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*

Версия от 1.5.0 (включая) до 1.5.2 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.06623

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2012-2237

CVSS3: 6.1

ubuntu

около 6 лет назад

CVE-2012-2237

CVSS3: 6.1

debian

около 6 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x be ...

GHSA-w8q2-462v-r883

github

почти 4 года назад

EPSS

Процентиль: 91%

0.06623

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79