APSB15-08 Security bulletin available for Adobe Flex

An important vulnerability has been identified in the JavaScript output of the ASDoc tool available in Adobe Flex 4.6 and earlier versions. This vulnerability could lead to reflected cross-site scripting. Adobe recommends users perform the actions referenced in the "Solutions" section below to...

Apache Flex Cross-Site Scripting Vulnerability

Apache Flex is the United States Apache Apache Software Foundation, a set of open source framework for creating Web and mobile applications. A cross-site scripting vulnerability exists in the asdoc/templates/index.html file in Apache Flex versions prior to 4.14.1. A remote attacker can exploit th...

CVE-2015-1773

Cross-site scripting XSS vulnerability in asdoc/templates/index.html in Apache Flex before 4.14.1 allows remote attackers to inject arbitrary web script or HTML by providing a crafted URI to JavaScript code generated by the asdoc component...

CVE-2015-1773: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in asdoc/templates/index.html in Apache Flex before 4.14.1 allows remote attackers to inject arbitrary web script or HTML by providing a crafted URI to JavaScript code generated by the asdoc component...