CVE

Id
70151  
CVE No.
CVE-2014-2856  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, related to the is_path_absolute function.  
Phase
Assigned (20140415)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
668886 70151 CVE-2014-2856 MLIST:[oss-security] 20140414 CVE request: cross-site scripting issue fixed in CUPS 1.7.2  View
668887 70151 CVE-2014-2856 URL:http://www.openwall.com/lists/oss-security/2014/04/14/2  View
668888 70151 CVE-2014-2856 MLIST:[oss-security] 20140415 Re: CVE request: cross-site scripting issue fixed in CUPS 1.7.2  View
668889 70151 CVE-2014-2856 URL:http://www.openwall.com/lists/oss-security/2014/04/15/3  View
668890 70151 CVE-2014-2856 CONFIRM:http://www.cups.org/documentation.php/relnotes.html  View
668891 70151 CVE-2014-2856 CONFIRM:http://www.cups.org/str.php?L4356  View
668892 70151 CVE-2014-2856 CONFIRM:http://advisories.mageia.org/MGASA-2014-0193.html  View
668893 70151 CVE-2014-2856 MANDRIVA:MDVSA-2015:108  View
668894 70151 CVE-2014-2856 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2015:108  View
668895 70151 CVE-2014-2856 REDHAT:RHSA-2014:1388  View
668896 70151 CVE-2014-2856 URL:http://rhn.redhat.com/errata/RHSA-2014-1388.html  View
668897 70151 CVE-2014-2856 BID:66788  View
668898 70151 CVE-2014-2856 URL:http://www.securityfocus.com/bid/66788  View
668899 70151 CVE-2014-2856 SECUNIA:57880  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13287 JVNDB-2014-002162 PaperThin CommonSpot におけるディレクトリトラバーサルの脆弱性 PaperThin CommonSpot には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2014-2864 70151 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002162.html  View