CVE-2012-2253: XSS
Published Nov 24, 2012
·Updated
Cross-site scripting (XSS) vulnerability in group/members.php in Mahara 1.5.x before 1.5.7 and 1.6.x before 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the query parameter.
Affected Software
10 affected components
Mahara Mahara=1.5-rc1
Mahara Mahara=1.5-rc2
Mahara Mahara=1.5.0
Mahara Mahara=1.5.1
Mahara Mahara=1.5.2
Mahara Mahara=1.5.3
Mahara Mahara=1.5.4
Mahara Mahara=1.5.6
Mahara Mahara=1.6.0
Mahara Mahara=1.6.1
Remediation
Patch Available
Event History
Nov 24, 2012
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2253?
CVE-2012-2253 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2012-2253?
To fix CVE-2012-2253, upgrade Mahara to version 1.5.7 or 1.6.2 or later.
3
What software versions are affected by CVE-2012-2253?
CVE-2012-2253 affects Mahara versions 1.5.x before 1.5.7 and 1.6.x before 1.6.2.
4
What type of vulnerability is CVE-2012-2253?
CVE-2012-2253 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2012-2253 lead to data breaches?
Yes, CVE-2012-2253 can lead to data breaches by allowing attackers to inject malicious scripts.