CVE-2012-5920: XSS
First published: Tue Nov 20 2012(Updated: )
Cross-site scripting (XSS) vulnerability in Google Web Toolkit (GWT) 2.4 through 2.5 Final, as used in JBoss Operations Network (ON) 3.1.1 and possibly other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2012-4563.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Web Toolkit | =2.4-beta | |
| Google Web Toolkit | =2.4.0 | |
| Google Web Toolkit | =2.5.0 | |
| Google Web Toolkit | =2.5.0-rc1 | |
| Google Web Toolkit | =2.5.0-rc2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/google
- canonical/google web toolkit
- version/google web toolkit/2.4-beta
- version/google web toolkit/2.4.0
- version/google web toolkit/2.5.0
- version/google web toolkit/2.5.0-rc1
- version/google web toolkit/2.5.0-rc2