CVE

Id
59375  
CVE No.
CVE-2012-6132  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter.  
Phase
Assigned (20121206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
604880 59375 CVE-2012-6132 MLIST:[oss-security] 20121110 CVE Request -- roundup: Multiple XSS flaws plus other security related fixes corrected in upstream 1.4.20 version  View
604881 59375 CVE-2012-6132 URL:http://www.openwall.com/lists/oss-security/2012/11/10/2  View
604882 59375 CVE-2012-6132 MLIST:[oss-security] 20130213 Re: CVE Request -- roundup: Multiple XSS flaws plus other security related fixes corrected in upstream 1.4.20 version  View
604883 59375 CVE-2012-6132 URL:http://www.openwall.com/lists/oss-security/2013/02/13/8  View
604884 59375 CVE-2012-6132 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=722672  View
604885 59375 CVE-2012-6132 XF:roundup-cve20126132-otk-xss(84191)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21198 JVNDB-2013-002773 Red Hat subscription-manager の rhn-migrate-classic-to-rhsm における重要な情報を取得される脆弱性 Red Hat subscription-manager の rhn-migrate-classic-to-rhsm は、Certificate-based Red Hat Network に移行する際、Red Hat Network Classic サーバの X.509 証明書を検証しないため、ユーザの認証情報などの重要な情報を取得される脆弱性が存在します。 CVE-2012-6137 59375 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002773.html  View