CVE-2012-5502: XSS

Q: What is the severity of CVE-2012-5502?

The CVE-2012-5502 vulnerability is classified as a cross-site scripting (XSS) vulnerability, which can pose a significant risk to users.

Q: How do I fix CVE-2012-5502?

To remediate CVE-2012-5502, upgrade to Plone version 4.2.3 or higher.

Q: Which versions of Plone are affected by CVE-2012-5502?

CVE-2012-5502 affects Plone versions prior to 4.2.3 and some versions of 4.3 before beta 1.

Q: What type of attack does CVE-2012-5502 enable?

CVE-2012-5502 enables remote authenticated users to inject arbitrary web script or HTML, leading to potential XSS attacks.

Q: Who is at risk from CVE-2012-5502?

Remote authenticated users with permissions to edit content are at risk from CVE-2012-5502 due to the ability to inject malicious scripts.

Published Sep 30, 2014

Updated

Cross-site scripting (XSS) vulnerability in safehtml.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with permissions to edit content to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

74 affected componentsFixes available

pip/Plone>=4.3a0<4.3b1

4.3b1

pip/plone<4.2.3

4.2.3

Plone plone<=4.2.2

Plone plone=1.0

Plone plone=1.0.1

Plone plone=1.0.2

Plone plone=1.0.3

Plone plone=1.0.4

Plone plone=1.0.5

Plone plone=1.0.6

Plone plone=2.0

Plone plone=2.0.1

Plone plone=2.0.2

Plone plone=2.0.3

Plone plone=2.0.4

Plone plone=2.0.5

Plone plone=2.1

Plone plone=2.1.1

Plone plone=2.1.2

Plone plone=2.1.3

Plone plone=2.1.4

Plone plone=2.5

Plone plone=2.5.1

Plone plone=2.5.2

Plone plone=2.5.3

Plone plone=2.5.4

Plone plone=2.5.5

Plone plone=3.0

Plone plone=3.0.1

Plone plone=3.0.2

Plone plone=3.0.3

Plone plone=3.0.4

Plone plone=3.0.5

Plone plone=3.0.6

Plone plone=3.1

Plone plone=3.1.1

Plone plone=3.1.2

Plone plone=3.1.3

Plone plone=3.1.4

Plone plone=3.1.5.1

Plone plone=3.1.6

Plone plone=3.1.7

Plone plone=3.2

Plone plone=3.2.1

Plone plone=3.2.2

Plone plone=3.2.3

Plone plone=3.3

Plone plone=3.3.1

Plone plone=3.3.2

Plone plone=3.3.3

Plone plone=3.3.4

Plone plone=3.3.5

Plone plone=4.0

Plone plone=4.0.1

Plone plone=4.0.2

Plone plone=4.0.3

Plone plone=4.0.4

Plone plone=4.0.5

Plone plone=4.0.6.1

Plone plone=4.1

Plone plone=4.1.4

Plone plone=4.1.5

Plone plone=4.1.6

Plone plone=4.2

Plone plone=4.2-a1

Plone plone=4.2-a2

Plone plone=4.2-b1

Plone plone=4.2-b2

Plone plone=4.2-rc1

Plone plone=4.2-rc2

Plone plone=4.2.0.1

Plone plone=4.2.1

Plone plone=4.2.1.1

Plone plone=4.3

Remediation

Patch Available

https://plone.org/products/plone-hotfix/releases/20121106

Event History

Sep 30, 2014

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

May 17, 2022

Advisory Published

04:32 AM

Frequently Asked Questions

What is the severity of CVE-2012-5502?

The CVE-2012-5502 vulnerability is classified as a cross-site scripting (XSS) vulnerability, which can pose a significant risk to users.

How do I fix CVE-2012-5502?