Lucene search
MitreCVE-2012-4230HistoryApr 25, 2014 - 2:15 p.m.
CVE-2012-4230
2014-04-2514:15:30
CWE-264
mitre
web.nvd.nist.gov
41
cve-2012-4230
bbcode plugin
tinymce 3.5.8
cross-site scripting
xss
security policy
encoding directive
valid_elements attribute
nvd
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.8
Confidence
High
EPSS
0.002
Percentile
61.4%
The bbcode plugin in TinyMCE 3.5.8 does not properly enforce the TinyMCE security policy for the (1) encoding directive and (2) valid_elements attribute, which allows attackers to conduct cross-site scripting (XSS) attacks via application-specific vectors, as demonstrated using a textarea element.
Affected configurations
Node
tinymcetinymceMatch3.5.8
Related
debiancve
debiancve
CVE-2012-4230
2014-04-25 14:15:30
nessus
nessus
Fedora 20 : roundcubemail-1.0.4-2.fc20 (2014-17461)
2015-01-06 00:00:00
Fedora 21 : roundcubemail-1.0.4-2.fc21 (2014-17450)
2015-01-06 00:00:00
Fedora 21 : sagemath-6.3-5.fc21 (2014-16756)
2014-12-22 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: sagemath-6.3-5.fc21
2014-12-19 18:26:51
[SECURITY] Fedora 20 Update: roundcubemail-1.0.4-2.fc20
2015-01-06 06:15:58
[SECURITY] Fedora 20 Update: sagemath-6.1.1-6.fc20
2014-12-21 06:41:08
packetstorm
packetstorm
TinyMCE 3.5.8 Cross Site Scripting
2013-03-11 00:00:00
prion
prion
Cross site scripting
2014-04-25 14:15:00
openvas
openvas
Fedora Update for sagemath FEDORA-2014-16667
2014-12-22 00:00:00
Fedora Update for sagemath FEDORA-2014-16756
2015-01-05 00:00:00
Fedora Update for roundcubemail FEDORA-2015-1772
2015-02-15 00:00:00
ubuntucve
ubuntucve
CVE-2012-4230
2014-04-25 00:00:00
cvelist
cvelist
CVE-2012-4230
2014-04-25 10:00:00
nvd
nvd
CVE-2012-4230
2014-04-25 14:15:30
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.8
Confidence
High
EPSS
0.002
Percentile
61.4%
Related for CVE-2012-4230