CVE-2014-2235

CVE-2014-2235

EPSS 1.9%

Cross-site scripting (XSS) vulnerability in Askbot before 0.7.49 allows remote attackers to inject arbitrary web script or HTML via vectors related to the question search form.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://bugzilla.redhat.com/show_bug.cgi?id=1070852 http://secunia.com/advisories/57163 https://github.com/ASKBOT/askbot-devel/commit/876e3662ff6b78cc6241338c15e3a0cb49edf4e2 http://www.openwall.com/lists/oss-security/2014/02/28/8 http://www.securityfocus.com/bid/65885