CVE-2012-4189 in Bugzilla
Zusammenfassung (Englisch)
Cross-site scripting (XSS) vulnerability in Bugzilla 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1, allows remote attackers to inject arbitrary web script or HTML via a field value that is not properly handled during construction of a tabular report, as demonstrated by the Version field.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservieren
08.08.2012
Veröffentlichung
16.11.2012
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 6945 | Bugzilla report-table.html.tmpl Cross Site Scripting | 79 | High | Offizieller Fix | CVE-2012-4189 |