Podatność CVE-2012-1113

Podatność CVE-2012-1113

Publikacja: 2012-04-22

Opis:

Typ:

(Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
4.3/10	2.9/10	8.6/10

Affected software
Menalto -> Gallery
Maian -> Gallery

http://gallery.menalto.com/gallery_3_0_3_and_gallery_2_3_2

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078618.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078752.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078816.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078851.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078873.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078925.html

http://www.securityfocus.com/bid/52996

https://bugzilla.redhat.com/show_bug.cgi?id=812045

https://exchange.xforce.ibmcloud.com/vulnerabilities/74837