CVE-2012-2237: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.3 and 1.5.x before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) javascript innerHTML as used when generating login forms, (2) links or (3) resources URLs, and (4) the Display name in a user profile.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2012-2237?
CVE-2012-2237 is a vulnerability that allows remote attackers to inject arbitrary web script or HTML in Mahara versions 1.4.x before 1.4.3 and 1.5.x before 1.5.2 via various vectors.
How severe is CVE-2012-2237?
CVE-2012-2237 has a severity rating of medium with a CVSS score of 6.1.
Which software versions are affected by CVE-2012-2237?
Mahara versions 1.4.x before 1.4.3 and 1.5.x before 1.5.2 are affected by CVE-2012-2237.
How can CVE-2012-2237 be exploited?
CVE-2012-2237 can be exploited by remote attackers who inject arbitrary web script or HTML via various vectors such as login forms, links or resources URLs, and the Disp.
How can I fix CVE-2012-2237?
To fix CVE-2012-2237, you should upgrade to Mahara version 1.4.3 or 1.5.2, which contain the necessary security patches.