CVE-2012-6369

2012-12-2811:00:00

mitre

www.cve.org

cve-2012-6369

agilebits 1password

xss vulnerability

remote attackers

web script

html injection

user-agent http header

troubleshooting report action

AI Score

5.6

Confidence

High

EPSS

0.002

Percentile

52.8%

JSON

Cross-site scripting (XSS) vulnerability in the Troubleshooting Reporting System feature in AgileBits 1Password 3.9.9 might allow remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header that is not properly handled in a View Troubleshooting Report action.