CVE-2014-2090: XSS
Published Mar 2, 2014
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in ilias.php in ILIAS 4.4.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) tar, (2) tarval, or (3) title parameter.
Affected Software
1 affected component
ILIAS ILIAS=4.4.1
Event History
Mar 2, 2014
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
via NVD·05:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-2090?
CVE-2014-2090 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2014-2090?
To fix CVE-2014-2090, you should upgrade to a patched version of ILIAS beyond 4.4.1 that addresses these vulnerabilities.
3
Who is affected by CVE-2014-2090?
CVE-2014-2090 affects remote authenticated users of ILIAS version 4.4.1.
4
What types of attacks can CVE-2014-2090 facilitate?
CVE-2014-2090 can facilitate cross-site scripting (XSS) attacks, allowing attackers to inject arbitrary web scripts or HTML.
5
What input parameters are involved in CVE-2014-2090?
CVE-2014-2090 involves the parameters tar, tar_val, and title in ilias.php.