Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-4230HistoryApr 25, 2014 - 2:15 p.m.
CVE-2012-4230
2014-04-2514:15:30
Debian Security Bug Tracker
security-tracker.debian.org
6
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
61.4%
The bbcode plugin in TinyMCE 3.5.8 does not properly enforce the TinyMCE security policy for the (1) encoding directive and (2) valid_elements attribute, which allows attackers to conduct cross-site scripting (XSS) attacks via application-specific vectors, as demonstrated using a textarea element.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 10 | all | tinymce | <= 3.4.8+dfsg0-2 | tinymce_3.4.8+dfsg0-2_all.deb |
Related
nessus
nessus
Fedora 21 : roundcubemail-1.0.4-2.fc21 (2014-17450)
2015-01-06 00:00:00
Fedora 21 : sagemath-6.3-5.fc21 (2014-16756)
2014-12-22 00:00:00
Fedora 20 : roundcubemail-1.0.4-2.fc20 (2014-17461)
2015-01-06 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: sagemath-6.3-5.fc21
2014-12-19 18:26:51
[SECURITY] Fedora 21 Update: roundcubemail-1.0.4-2.fc21
2015-01-06 06:13:04
[SECURITY] Fedora 20 Update: roundcubemail-1.0.4-2.fc20
2015-01-06 06:15:58
packetstorm
packetstorm
TinyMCE 3.5.8 Cross Site Scripting
2013-03-11 00:00:00
cve
cve
CVE-2012-4230
2014-04-25 14:15:30
openvas
openvas
Fedora Update for sagemath FEDORA-2014-16667
2014-12-22 00:00:00
Fedora Update for sagemath FEDORA-2014-16756
2015-01-05 00:00:00
Fedora Update for roundcubemail FEDORA-2015-1772
2015-02-15 00:00:00
cvelist
cvelist
CVE-2012-4230
2014-04-25 10:00:00
ubuntucve
ubuntucve
CVE-2012-4230
2014-04-25 00:00:00
nvd
nvd
CVE-2012-4230
2014-04-25 14:15:30
prion
prion
Cross site scripting
2014-04-25 14:15:00
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
61.4%
Related for DEBIANCVE:CVE-2012-4230