CVE

Id
55298  
CVE No.
CVE-2012-2055  
Status
Candidate  
Description
GitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values for a model"s attributes, which allows remote attackers to set the public_key[user_id] value via a modified URL for the public-key update form, related to a "mass assignment" vulnerability.  
Phase
Assigned (20120404)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
577658 55298 CVE-2012-2055 MISC:http://homakov.blogspot.com/2012/03/how-to.html  View
577659 55298 CVE-2012-2055 MISC:http://lwn.net/Articles/488702/  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28735 JVNDB-2012-004442 Drupal 用 Admin tools モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 Admin tools モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-2060 55298 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004442.html  View