CVE-2011-1841: XSS
Published May 3, 2011
·Updated
Cross-site scripting (XSS) vulnerability in the linkto helper in Mojolicious before 1.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
78 affected components
Mojolicious Mojolicious=0.8007
Mojolicious Mojolicious=0.999941
Mojolicious Mojolicious=0.999912
Mojolicious Mojolicious=0.991241
Mojolicious Mojolicious=0.999901
Mojolicious Mojolicious=0.999933
Mojolicious Mojolicious=0.991235
Mojolicious Mojolicious=0.991243
Mojolicious Mojolicious=0.999903
Mojolicious Mojolicious=1.0
Mojolicious Mojolicious=0.8009
Mojolicious Mojolicious=0.999934
Mojolicious Mojolicious=0.991244
Mojolicious Mojolicious=0.999925
Mojolicious Mojolicious=0.999927
Mojolicious Mojolicious=0.991237
Mojolicious Mojolicious=0.9
Mojolicious Mojolicious=0.8008
Mojolicious Mojolicious=1.1
Mojolicious Mojolicious<=1.11
Mojolicious Mojolicious=0.999920
Mojolicious Mojolicious=0.991242
Mojolicious Mojolicious=0.991239
Mojolicious Mojolicious=0.999914
Mojolicious Mojolicious=0.3
Mojolicious Mojolicious=0.999935
Mojolicious Mojolicious=0.999924
Mojolicious Mojolicious=0.991238
Mojolicious Mojolicious=0.9001
Mojolicious Mojolicious=0.5
Mojolicious Mojolicious=0.999922
Mojolicious Mojolicious=0.8
Mojolicious Mojolicious=0.991245
Mojolicious Mojolicious=0.999909
Mojolicious Mojolicious=0.999913
Mojolicious Mojolicious=0.999904
Mojolicious Mojolicious=0.999911
Mojolicious Mojolicious=0.8.5
Mojolicious Mojolicious=0.2
Mojolicious Mojolicious=0.6
Mojolicious Mojolicious=0.999930
Mojolicious Mojolicious=0.991250
Mojolicious Mojolicious=0.999902
Mojolicious Mojolicious=0.999940
Mojolicious Mojolicious=0.999921
Mojolicious Mojolicious=0.991234
Mojolicious Mojolicious=0.8.3
Mojolicious Mojolicious=0.999928
Mojolicious Mojolicious=0.999938
Mojolicious Mojolicious=0.999908
Mojolicious Mojolicious=0.999907
Mojolicious Mojolicious=0.991233
Mojolicious Mojolicious=0.991251
Mojolicious Mojolicious=0.8.4
Mojolicious Mojolicious=0.999932
Mojolicious Mojolicious=0.8006
Mojolicious Mojolicious=0.999950
Mojolicious Mojolicious=0.4
Mojolicious Mojolicious=0.999906
Mojolicious Mojolicious=0.999939
Mojolicious Mojolicious=0.991231
Mojolicious Mojolicious=1.01
Mojolicious Mojolicious=0.999910
Mojolicious Mojolicious=0.8.2
Mojolicious Mojolicious=0.991246
Mojolicious Mojolicious=0.9002
Mojolicious Mojolicious=0.999929
Mojolicious Mojolicious=0.999923
Mojolicious Mojolicious=0.999926
Mojolicious Mojolicious=0.999931
Mojolicious Mojolicious=0.999937
Mojolicious Mojolicious=0.991232
Mojolicious Mojolicious=0.999905
Mojolicious Mojolicious=0.8.1
Mojolicious Mojolicious=0.991236
Mojolicious Mojolicious=0.991240
Mojolicious Mojolicious=0.999936
Mojolicious Mojolicious=0.7
Event History
May 3, 2011
CVE Published
via MITRE·12:03 AM
Data Sourced
via MITRE·12:03 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1841?
CVE-2011-1841 is a cross-site scripting (XSS) vulnerability resulting from improper input validation.
2
How do I fix CVE-2011-1841?
To fix CVE-2011-1841, upgrade to version 1.12 or later of Mojolicious.
3
What versions of Mojolicious are affected by CVE-2011-1841?
CVE-2011-1841 affects Mojolicious versions prior to 1.12.
4
Can CVE-2011-1841 be exploited remotely?
Yes, CVE-2011-1841 can be exploited by remote attackers to inject arbitrary web scripts or HTML.
5
What type of attacks can CVE-2011-1841 facilitate?
CVE-2011-1841 can facilitate XSS attacks, potentially allowing attackers to steal user data or session cookies.