Lucene search

[email protected]CVE-2012-2769

HistoryAug 15, 2012 - 9:55 p.m.

CVE-2012-2769

2012-08-1521:55:01

CWE-79

[email protected]

web.nvd.nist.gov

cve-2012-2769

cross-site scripting

xss

extension::mobileui

best practical solutions rt

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the Extension::MobileUI extension before 1.02 for Best Practical Solutions RT 3.8.x and in Best Practical Solutions RT before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

jesse_vincentextension\Match\mobileui

AND

bestpracticalrtRange≤4.0.5

bestpracticalrtMatch3.8.0

bestpracticalrtMatch3.8.0rc1

bestpracticalrtMatch3.8.0rc2

bestpracticalrtMatch3.8.0rc3

bestpracticalrtMatch3.8.1

bestpracticalrtMatch3.8.1rc1

bestpracticalrtMatch3.8.1rc2

bestpracticalrtMatch3.8.1rc3

bestpracticalrtMatch3.8.1rc4

bestpracticalrtMatch3.8.1rc5

bestpracticalrtMatch3.8.2

bestpracticalrtMatch3.8.2rc1

bestpracticalrtMatch3.8.2rc2

bestpracticalrtMatch3.8.3

bestpracticalrtMatch3.8.3rc1

bestpracticalrtMatch3.8.3rc2

bestpracticalrtMatch3.8.4

bestpracticalrtMatch3.8.4rc1

bestpracticalrtMatch3.8.5

bestpracticalrtMatch3.8.6

bestpracticalrtMatch3.8.6rc1

bestpracticalrtMatch3.8.7

bestpracticalrtMatch3.8.7rc1

bestpracticalrtMatch3.8.8

bestpracticalrtMatch3.8.8rc2

bestpracticalrtMatch3.8.8rc3

bestpracticalrtMatch3.8.8rc4

bestpracticalrtMatch3.8.9

bestpracticalrtMatch3.8.9rc1

bestpracticalrtMatch3.8.9rc2

bestpracticalrtMatch3.8.9rc3

bestpracticalrtMatch3.8.10

bestpracticalrtMatch3.8.11

bestpracticalrtMatch3.8.12

bestpracticalrtMatch4.0.0

bestpracticalrtMatch4.0.0rc1

bestpracticalrtMatch4.0.0rc2

bestpracticalrtMatch4.0.0rc3

bestpracticalrtMatch4.0.0rc4

bestpracticalrtMatch4.0.0rc5

bestpracticalrtMatch4.0.0rc6

bestpracticalrtMatch4.0.0rc7

bestpracticalrtMatch4.0.0rc8

bestpracticalrtMatch4.0.1

bestpracticalrtMatch4.0.2

bestpracticalrtMatch4.0.3

bestpracticalrtMatch4.0.4

CPENameOperatorVersion
jesse_vincent:extension\:\:mobileuijesse vincent extension::mobileuile1.01

CPE	Name	Operator	Version
jesse_vincent:extension\:\:mobileui	jesse vincent extension::mobileui	le	1.01

References

lists.bestpractical.com/pipermail/rt-announce/2012-July/000208.html

secunia.com/advisories/50010

www.securityfocus.com/bid/54684

exchange.xforce.ibmcloud.com/vulnerabilities/77211

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.4%

JSON

Related for CVE-2012-2769

ubuntucve1 cvelist1 nvd1 debiancve1 prion1