CVE-2012-4451
Description
Multiple cross-site scripting (XSS) vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified input to (1) Debug, (2) Feed\PubSubHubbub, (3) Log\Formatter\Xml, (4) Tag\Cloud\Decorator, (5) Uri, (6) View\Helper\HeadStyle, (7) View\Helper\Navigation\Sitemap, or (8) View\Helper\Placeholder\Container\AbstractStandalone, related to Escaper.
CWE
- (none)
Affected
- Zend Technologies / Zend Framework — v=2.0.x before 2.0.1 [affected]
CVSS
- (none)
References
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688946#10 x_refsource_MISC
- https://bugs.gentoo.org/show_bug.cgi?id=436210 x_refsource_MISC
- http://seclists.org/oss-sec/2012/q3/571 x_refsource_MISC
- http://seclists.org/oss-sec/2012/q3/573 x_refsource_MISC
- http://framework.zend.com/security/advisory/ZF2012-03 x_refsource_MISC
- https://bugzilla.redhat.com/show_bug.cgi?id=860738 x_refsource_MISC
- https://github.com/zendframework/zf2/commit/27131ca9520bdf1d4c774c71459eba32f2b10733 x_refsource_MISC
- http://www.securityfocus.com/bid/55636 x_refsource_MISC
Source
cvelistV5-main/cves/2012/4xxx/CVE-2012-4451.json