CVE-2012-4003: XSS
Published Oct 9, 2012
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in GLPI-PROJECT GLPI before 0.83.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected Software
68 affected components
GLPI-PROJECT GLPI<=0.83.2
GLPI-PROJECT GLPI=0.5
GLPI-PROJECT GLPI=0.5-rc1
GLPI-PROJECT GLPI=0.5-rc2
GLPI-PROJECT GLPI=0.6
GLPI-PROJECT GLPI=0.6-rc1
GLPI-PROJECT GLPI=0.6-rc2
GLPI-PROJECT GLPI=0.6-rc3
GLPI-PROJECT GLPI=0.20
GLPI-PROJECT GLPI=0.21
GLPI-PROJECT GLPI=0.30
GLPI-PROJECT GLPI=0.31
GLPI-PROJECT GLPI=0.40
GLPI-PROJECT GLPI=0.41
GLPI-PROJECT GLPI=0.42
GLPI-PROJECT GLPI=0.51
GLPI-PROJECT GLPI=0.51a
GLPI-PROJECT GLPI=0.65
GLPI-PROJECT GLPI=0.65-rc1
GLPI-PROJECT GLPI=0.65-rc2
GLPI-PROJECT GLPI=0.68
GLPI-PROJECT GLPI=0.68-rc1
GLPI-PROJECT GLPI=0.68-rc2
GLPI-PROJECT GLPI=0.68-rc3
GLPI-PROJECT GLPI=0.68.1
GLPI-PROJECT GLPI=0.68.2
GLPI-PROJECT GLPI=0.68.3
GLPI-PROJECT GLPI=0.70
GLPI-PROJECT GLPI=0.70-rc1
GLPI-PROJECT GLPI=0.70-rc2
GLPI-PROJECT GLPI=0.70-rc3
GLPI-PROJECT GLPI=0.70.1
GLPI-PROJECT GLPI=0.70.2
GLPI-PROJECT GLPI=0.71
GLPI-PROJECT GLPI=0.71.1
GLPI-PROJECT GLPI=0.71.1-rc1
GLPI-PROJECT GLPI=0.71.1-rc2
GLPI-PROJECT GLPI=0.71.1-rc3
GLPI-PROJECT GLPI=0.71.2
GLPI-PROJECT GLPI=0.71.3
GLPI-PROJECT GLPI=0.71.4
GLPI-PROJECT GLPI=0.71.5
GLPI-PROJECT GLPI=0.71.6
GLPI-PROJECT GLPI=0.72
GLPI-PROJECT GLPI=0.72-rc1
GLPI-PROJECT GLPI=0.72-rc2
GLPI-PROJECT GLPI=0.72-rc3
GLPI-PROJECT GLPI=0.72.1
GLPI-PROJECT GLPI=0.72.2
GLPI-PROJECT GLPI=0.72.3
GLPI-PROJECT GLPI=0.72.4
GLPI-PROJECT GLPI=0.78
GLPI-PROJECT GLPI=0.78.1
GLPI-PROJECT GLPI=0.78.2
GLPI-PROJECT GLPI=0.78.3
GLPI-PROJECT GLPI=0.78.4
GLPI-PROJECT GLPI=0.78.5
GLPI-PROJECT GLPI=0.80
GLPI-PROJECT GLPI=0.80.1
GLPI-PROJECT GLPI=0.80.2
GLPI-PROJECT GLPI=0.80.3
GLPI-PROJECT GLPI=0.80.4
GLPI-PROJECT GLPI=0.80.5
GLPI-PROJECT GLPI=0.80.6
GLPI-PROJECT GLPI=0.80.7
GLPI-PROJECT GLPI=0.80.61
GLPI-PROJECT GLPI=0.83
GLPI-PROJECT GLPI=0.83.1
Event History
Oct 9, 2012
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4003?
CVE-2012-4003 is classified as a medium severity vulnerability due to the potential for cross-site scripting attacks.
2
How can I fix CVE-2012-4003?
To fix CVE-2012-4003, upgrade your GLPI installation to version 0.83.3 or later.
3
Which versions of GLPI are affected by CVE-2012-4003?
CVE-2012-4003 affects GLPI versions prior to 0.83.3, including all versions from 0.20 up to and including 0.83.2.
4
What type of vulnerability is CVE-2012-4003?
CVE-2012-4003 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts or HTML.
5
Can I mitigate CVE-2012-4003 without upgrading?
Mitigation without upgrading is difficult; however, implementing strict input validation and output encoding can help reduce the risk.