CVE-2012-0144: XSS
Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via JavaScript sequences in a URL, aka "XSS in themeweb.aspx Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0144?
CVE-2012-0144 is rated as a medium severity vulnerability.
How do I fix CVE-2012-0144?
To fix CVE-2012-0144, apply the latest security updates provided by Microsoft for SharePoint Server and SharePoint Foundation 2010.
What types of attacks can exploit CVE-2012-0144?
CVE-2012-0144 can be exploited through cross-site scripting (XSS) attacks, allowing attackers to execute arbitrary scripts in users' browsers.
Which Microsoft products are affected by CVE-2012-0144?
CVE-2012-0144 affects Microsoft SharePoint Server 2010 and 2010 SP1, as well as Microsoft SharePoint Foundation 2010 and 2010 SP1.
Is user input a factor in the vulnerability of CVE-2012-0144?
Yes, CVE-2012-0144 exploits the improper handling of JavaScript sequences in URLs, indicating that unchecked user input is a factor.