Lucene search
HistoryAug 07, 2012 - 7:55 p.m.
CVE-2012-2648
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
46.1%
Cross-site scripting (XSS) vulnerability in the GoodReader app 3.16 and earlier for iOS on the iPad, and 3.15.1 and earlier for iOS on the iPhone and iPod touch, allows remote attackers to inject arbitrary web script or HTML via vectors involving use of this app in conjunction with a web browser.
Affected configurations
Node
goodiwaregoodreaderRange≤3.16-iphone_os
ORgoodiwaregoodreaderMatch1.1-iphone_os
ORgoodiwaregoodreaderMatch2.0-iphone_os
ORgoodiwaregoodreaderMatch2.1-iphone_os
ORgoodiwaregoodreaderMatch2.2-iphone_os
ORgoodiwaregoodreaderMatch2.3-iphone_os
ORgoodiwaregoodreaderMatch2.4-iphone_os
ORgoodiwaregoodreaderMatch2.5-iphone_os
ORgoodiwaregoodreaderMatch2.5.1-iphone_os
ORgoodiwaregoodreaderMatch2.6-iphone_os
ORgoodiwaregoodreaderMatch2.7-iphone_os
ORgoodiwaregoodreaderMatch2.7.4-iphone_os
ORgoodiwaregoodreaderMatch2.8-iphone_os
ORgoodiwaregoodreaderMatch2.8.4-iphone_os
ORgoodiwaregoodreaderMatch3.0.0-iphone_os
ORgoodiwaregoodreaderMatch3.0.1-iphone_os
ORgoodiwaregoodreaderMatch3.0.2-iphone_os
ORgoodiwaregoodreaderMatch3.0.3-iphone_os
ORgoodiwaregoodreaderMatch3.1.0-iphone_os
ORgoodiwaregoodreaderMatch3.1.2-iphone_os
ORgoodiwaregoodreaderMatch3.2.0-iphone_os
ORgoodiwaregoodreaderMatch3.3.0-iphone_os
ORgoodiwaregoodreaderMatch3.3.1-iphone_os
ORgoodiwaregoodreaderMatch3.4.0-iphone_os
ORgoodiwaregoodreaderMatch3.4.1-iphone_os
ORgoodiwaregoodreaderMatch3.5.0-iphone_os
ORgoodiwaregoodreaderMatch3.5.1-iphone_os
ORgoodiwaregoodreaderMatch3.6.0-iphone_os
ORgoodiwaregoodreaderMatch3.6.1-iphone_os
ORgoodiwaregoodreaderMatch3.7.0-iphone_os
ORgoodiwaregoodreaderMatch3.7.1-iphone_os
ORgoodiwaregoodreaderMatch3.8.0-iphone_os
ORgoodiwaregoodreaderMatch3.9.0-iphone_os
ORgoodiwaregoodreaderMatch3.10.0-iphone_os
ORgoodiwaregoodreaderMatch3.10.1-iphone_os
ORgoodiwaregoodreaderMatch3.10.2-iphone_os
ORgoodiwaregoodreaderMatch3.10.3-iphone_os
ORgoodiwaregoodreaderMatch3.11.0-iphone_os
ORgoodiwaregoodreaderMatch3.11.1-iphone_os
ORgoodiwaregoodreaderMatch3.12.0-iphone_os
ORgoodiwaregoodreaderMatch3.13.0-iphone_os
ORgoodiwaregoodreaderMatch3.13.1-iphone_os
ORgoodiwaregoodreaderMatch3.14.0-iphone_os
ORgoodiwaregoodreaderMatch3.14.2-iphone_os
ORgoodiwaregoodreaderMatch3.15.0-iphone_os
ORgoodiwaregoodreaderMatch3.15.1-iphone_os
appleipad
Node
goodiwaregoodreaderRange≤3.15.1-iphone_os
ORgoodiwaregoodreaderMatch1.1-iphone_os
ORgoodiwaregoodreaderMatch2.0-iphone_os
ORgoodiwaregoodreaderMatch2.1-iphone_os
ORgoodiwaregoodreaderMatch2.2-iphone_os
ORgoodiwaregoodreaderMatch2.3-iphone_os
ORgoodiwaregoodreaderMatch2.4-iphone_os
ORgoodiwaregoodreaderMatch2.5-iphone_os
ORgoodiwaregoodreaderMatch2.5.1-iphone_os
ORgoodiwaregoodreaderMatch2.6-iphone_os
ORgoodiwaregoodreaderMatch2.7-iphone_os
ORgoodiwaregoodreaderMatch2.8.2-iphone_os
ORgoodiwaregoodreaderMatch2.8.5-iphone_os
ORgoodiwaregoodreaderMatch3.0.0-iphone_os
ORgoodiwaregoodreaderMatch3.0.1-iphone_os
ORgoodiwaregoodreaderMatch3.0.2-iphone_os
ORgoodiwaregoodreaderMatch3.0.3-iphone_os
ORgoodiwaregoodreaderMatch3.2.1-iphone_os
ORgoodiwaregoodreaderMatch3.2.3-iphone_os
ORgoodiwaregoodreaderMatch3.3.0-iphone_os
ORgoodiwaregoodreaderMatch3.3.1-iphone_os
ORgoodiwaregoodreaderMatch3.4.0-iphone_os
ORgoodiwaregoodreaderMatch3.4.1-iphone_os
ORgoodiwaregoodreaderMatch3.5.0-iphone_os
ORgoodiwaregoodreaderMatch3.5.1-iphone_os
ORgoodiwaregoodreaderMatch3.6.0-iphone_os
ORgoodiwaregoodreaderMatch3.6.1-iphone_os
ORgoodiwaregoodreaderMatch3.7.0-iphone_os
ORgoodiwaregoodreaderMatch3.7.1-iphone_os
ORgoodiwaregoodreaderMatch3.8.1-iphone_os
ORgoodiwaregoodreaderMatch3.9.1-iphone_os
ORgoodiwaregoodreaderMatch3.10.0-iphone_os
ORgoodiwaregoodreaderMatch3.10.1-iphone_os
ORgoodiwaregoodreaderMatch3.10.2-iphone_os
ORgoodiwaregoodreaderMatch3.10.3-iphone_os
ORgoodiwaregoodreaderMatch3.11.0-iphone_os
ORgoodiwaregoodreaderMatch3.11.1-iphone_os
ORgoodiwaregoodreaderMatch3.12.1-iphone_os
ORgoodiwaregoodreaderMatch3.13.0-iphone_os
ORgoodiwaregoodreaderMatch3.13.1-iphone_os
ORgoodiwaregoodreaderMatch3.14.1-iphone_os
ORgoodiwaregoodreaderMatch3.15.0-iphone_os
appleipod_touch
ORappleiphone_os
Related
prion
prion
Cross site scripting
2012-08-07 19:55:00
cvelist
cvelist
CVE-2012-2648
2022-10-03 16:15:35
cve
cve
CVE-2012-2648
2022-10-03 16:15:35
jvn
jvn
JVN#01598734: GoodReader vulnerable to cross-site scripting
2012-08-02 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
46.1%
Related for NVD:CVE-2012-2648