NVD

Id
45909  
Name
CVE-2012-4533  
Description
Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource._get_row function in lib/viewvc.py in ViewVC 1.0.x before 1.0.13 and 1.1.x before 1.1.16 allows remote authenticated users with repository commit access to inject arbitrary web script or HTML via the "function name" line.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-11-18  
Modified Date
2014-02-11  
Seq
2012-4533  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
230550 45909 CVE-2012-4533 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=691062  View
230551 45909 CVE-2012-4533 http://viewvc.tigris.org/issues/show_bug.cgi?id=515  View
230552 45909 CVE-2012-4533 http://viewvc.tigris.org/source/browse/*checkout*/viewvc/tags/1.0.13/CHANGES  View
230553 45909 CVE-2012-4533 http://viewvc.tigris.org/source/browse/*checkout*/viewvc/tags/1.1.16/CHANGES  View
230554 45909 CVE-2012-4533 http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2792  View
230555 45909 CVE-2012-4533 http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2794  View
230556 45909 CVE-2012-4533 DSA-2563  View
230557 45909 CVE-2012-4533 MDVSA-2013:134  View
230558 45909 CVE-2012-4533 [oss-security] 20121020 CVE Request: viewvc 1.1.5 lib/viewvc.py XSS  View
230559 45909 CVE-2012-4533 [oss-security] 20121020 Re: CVE Request: viewvc 1.1.5 lib/viewvc.py XSS  View
230560 45909 CVE-2012-4533 56161  View
230561 45909 CVE-2012-4533 viewvc-viewvc-checkins-xss(79561)  View
230562 45909 CVE-2012-4533 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0313  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29723 JVNDB-2012-005430 ViewVC の lib/viewvc.py におけるクロスサイトスクリプティングの脆弱性 ViewVC の lib/viewvc.py 内の DiffSource._get_row 関数の余計な詳細 (extra details) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-4533 57771 CVE-2012-4533 45909 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005430.html 2012-10-24 2012-11-30 View