Lucene search

K
cvelistMitreCVELIST:CVE-2014-2856
HistoryApr 18, 2014 - 2:00 p.m.

CVE-2014-2856

2014-04-1814:00:00
mitre
www.cve.org
8

AI Score

6.7

Confidence

High

EPSS

0.009

Percentile

82.4%

Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, related to the is_path_absolute function.