NVD

Id
31186  
Name
CVE-2014-2856  
Description
Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, related to the is_path_absolute function.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-04-18  
Modified Date
2016-06-01  
Seq
2014-2856  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
163637 31186 CVE-2014-2856 http://advisories.mageia.org/MGASA-2014-0193.html  View
163638 31186 CVE-2014-2856 RHSA-2014:1388  View
163639 31186 CVE-2014-2856 http://www.cups.org/documentation.php/relnotes.html  View
163640 31186 CVE-2014-2856 http://www.cups.org/str.php?L4356  View
163641 31186 CVE-2014-2856 [oss-security] 20140414 CVE request: cross-site scripting issue fixed in CUPS 1.7.2  View
163642 31186 CVE-2014-2856 [oss-security] 20140415 Re: CVE request: cross-site scripting issue fixed in CUPS 1.7.2  View
163643 31186 CVE-2014-2856 66788  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13316 JVNDB-2014-002191 Common Unix Printing System の scheduler/client.c におけるクロスサイトスクリプティングの脆弱性 Common Unix Printing System (CUPS) の scheduler/client.c には、is_path_absolute 関数に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-2856 70143 CVE-2014-2856 31186 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002191.html 2014-04-10 2015-06-23 View