CVE-2012-5920: XSS

Published Nov 20, 2012

Updated

Cross-site scripting (XSS) vulnerability in Google Web Toolkit (GWT) 2.4 through 2.5 Final, as used in JBoss Operations Network (ON) 3.1.1 and possibly other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2012-4563.

Affected Software

5 affected components

Google Web Toolkit=2.4-beta

Google Web Toolkit=2.4.0

Google Web Toolkit=2.5.0

Google Web Toolkit=2.5.0-rc1

Google Web Toolkit=2.5.0-rc2

Event History

Nov 20, 2012

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-5920?

The severity of CVE-2012-5920 is considered high due to potential exploitation for cross-site scripting (XSS).

How do I fix CVE-2012-5920?

To fix CVE-2012-5920, upgrade Google Web Toolkit to version 2.5.1 or later, which addresses the vulnerability.

What products are affected by CVE-2012-5920?

CVE-2012-5920 affects Google Web Toolkit versions from 2.4-beta through 2.5.0 and may impact other products using these versions.

Can CVE-2012-5920 be exploited remotely?

Yes, CVE-2012-5920 allows remote attackers to inject arbitrary web scripts or HTML, making it exploitable over the internet.

What type of vulnerability is CVE-2012-5920?

CVE-2012-5920 is categorized as a cross-site scripting (XSS) vulnerability.