Veracode Vulnerability DatabaseVERACODE:23907Cross-site Scripting (XSS)
EPSS
Percentile
82.7%
The Common UNIX Printing System (CUPS) is vulnerable to Cross-site Scripting (XSS). Several cross-site scripting (XSS) flaws were found in the way the CUPS web server interface processed HTML form content. If a remote attacker could trick a local user who is logged into the CUPS web interface into visiting a specially-crafted HTML page, the attacker could retrieve and potentially modify confidential CUPS administration data.
References
lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
secunia.com/advisories/37308
secunia.com/advisories/37360
sunsolve.sun.com/search/document.do?assetkey=1-77-1021115.1-1
support.apple.com/kb/HT3937
www.cups.org/articles.php?L590
www.cups.org/documentation.php/relnotes.html
www.cups.org/str.php?L3367
www.mandriva.com/security/advisories?name=MDVSA-2010:072
www.mandriva.com/security/advisories?name=MDVSA-2010:073
www.redhat.com/security/updates/classification/#moderate
www.redhat.com/support/errata/RHSA-2009-1595.html
www.securityfocus.com/bid/36956
www.vupen.com/english/advisories/2009/3184
access.redhat.com/errata/RHSA-2009:1595
bugzilla.redhat.com/show_bug.cgi?id=529833
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9153
Related
