CVE-2012-0891 in Puppet Dashboard
Summary
Multiple cross-site scripting (XSS) vulnerabilities in Puppet Dashboard 1.0 before 1.2.5 and Enterprise 1.0 before 1.2.5 and 2.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified fields.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
01/20/2012
Disclosure
03/14/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 66643 | Puppetlabs Puppet Dashboard cross site scripting | 79 | Not defined | Official fix | CVE-2012-0891 |