Lucene search

PRIOn knowledge basePRION:CVE-2012-3373

HistorySep 19, 2012 - 7:55 p.m.

Cross site scripting

2012-09-1919:55:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

73.5%

JSON

Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.21 and 1.5.x before 1.5.8 allows remote attackers to inject arbitrary web script or HTML via vectors involving a %00 sequence in an Ajax link URL associated with a Wicket app.

CPENameOperatorVersion
wicketeq1.4.14
wicketeq1.4.12
wicketeq1.4.6
wicketeq1.4.17
wicketeq1.4.20
wicketeq1.4.3
wicketeq1.4.15
wicketeq1.4.9
wicketeq1.4.8
wicketeq1.4.5

Name	Operator	Version
wicket	eq	1.4.14
wicket	eq	1.4.12
wicket	eq	1.4.6
wicket	eq	1.4.17
wicket	eq	1.4.20
wicket	eq	1.4.3
wicket	eq	1.4.15
wicket	eq	1.4.9
wicket	eq	1.4.8
wicket	eq	1.4.5

Rows per page:

1-10 of 281

References

osvdb.org/85249

secunia.com/advisories/50555

wicket.apache.org/2012/09/06/cve-2012-3373.html

www.securityfocus.com/bid/55445

www.securitytracker.com/id?1027508

exchange.xforce.ibmcloud.com/vulnerabilities/78321

6.1 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

73.5%

JSON

Related for PRION:CVE-2012-3373