CVE-2012-5307: XSS
Cross-site scripting (XSS) vulnerability in servlet/traveler in IBM Lotus Notes Traveler before 8.5.3.3 Interim Fix 1, when Firefox is used, allows remote attackers to inject arbitrary web script or HTML via the redirectURL parameter, a different vulnerability than CVE-2012-4824 and CVE-2012-4825.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5307?
CVE-2012-5307 is categorized as a high severity vulnerability due to its potential for remote code execution via cross-site scripting (XSS).
How do I fix CVE-2012-5307?
To fix CVE-2012-5307, users should upgrade to IBM Lotus Notes Traveler version 8.5.3.3 Interim Fix 1 or a later version.
Which versions of IBM Lotus Notes Traveler are affected by CVE-2012-5307?
CVE-2012-5307 affects IBM Lotus Notes Traveler versions prior to 8.5.3.3 Interim Fix 1, including versions 8.5.0.0 to 8.5.3.2.
What type of attack does CVE-2012-5307 facilitate?
CVE-2012-5307 facilitates cross-site scripting (XSS) attacks, allowing attackers to inject arbitrary web scripts or HTML.
Is CVE-2012-5307 specific to any browser?
CVE-2012-5307 is specifically noted to occur when the Firefox browser is used with the affected versions of IBM Lotus Notes Traveler.