CVE-2014-5343: XSS
Published Aug 19, 2014
·Updated
Cross-site scripting (XSS) vulnerability in Feng Office allows remote attackers to inject arbitrary web script or HTML via a client Name field.
Affected Software
49 affected components
Fengoffice Feng Office=1.6.2
Fengoffice Feng Office=1.7
Fengoffice Feng Office=1.7-beta
Fengoffice Feng Office=1.7-beta2
Fengoffice Feng Office=1.7-rc
Fengoffice Feng Office=1.7-rc2
Fengoffice Feng Office=1.7-rc3
Fengoffice Feng Office=1.7.1
Fengoffice Feng Office=1.7.2
Fengoffice Feng Office=1.7.3.1
Fengoffice Feng Office=1.7.4
Fengoffice Feng Office=1.7.5
Fengoffice Feng Office=1.7.5-beta
Fengoffice Feng Office=1.7.5-rc2
Fengoffice Feng Office=1.7.5-rc3
Fengoffice Feng Office=2.0.0
Fengoffice Feng Office=2.0.0-beta1
Fengoffice Feng Office=2.0.0-beta2
Fengoffice Feng Office=2.0.0-beta3
Fengoffice Feng Office=2.0.0-beta4
Fengoffice Feng Office=2.0.0-rc
Fengoffice Feng Office=2.1.0
Fengoffice Feng Office=2.1.0-beta
Fengoffice Feng Office=2.1.0-rc
Fengoffice Feng Office=2.1.0-rc2
Fengoffice Feng Office=2.2.0
Fengoffice Feng Office=2.2.0-beta
Fengoffice Feng Office=2.2.0-rc
Fengoffice Feng Office=2.2.1
Fengoffice Feng Office=2.2.1-rc
Fengoffice Feng Office=2.2.2
Fengoffice Feng Office=2.2.3.1
Fengoffice Feng Office=2.2.3.1-beta
Fengoffice Feng Office=2.2.4
Fengoffice Feng Office=2.2.4-beta
Fengoffice Feng Office=2.2.4.1
Fengoffice Feng Office=2.3
Fengoffice Feng Office=2.3-beta
Fengoffice Feng Office=2.3-rc
Fengoffice Feng Office=2.3-rc2
Fengoffice Feng Office=2.3.1
Fengoffice Feng Office=2.3.1-beta
Fengoffice Feng Office=2.3.1-rc
Fengoffice Feng Office=2.3.1.1
Fengoffice Feng Office=2.3.2
Fengoffice Feng Office=2.3.2-beta
Fengoffice Feng Office=2.3.2-rc
Fengoffice Feng Office=2.3.2-rc2
Fengoffice Feng Office=2.3.2.1
Event History
Aug 19, 2014
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-5343?
CVE-2014-5343 is classified as a moderate severity vulnerability due to its cross-site scripting (XSS) nature.
2
How do I fix CVE-2014-5343?
To fix CVE-2014-5343, sanitize user input in the client Name field to prevent injection of arbitrary web scripts or HTML.
3
What systems are affected by CVE-2014-5343?
CVE-2014-5343 affects multiple versions of Feng Office, including versions 1.6.2 through 2.3.2.1.
4
Can CVE-2014-5343 be exploited remotely?
Yes, CVE-2014-5343 can be exploited remotely by attackers injecting malicious scripts through the affected client Name field.
5
What type of vulnerability is CVE-2014-5343?
CVE-2014-5343 is a cross-site scripting (XSS) vulnerability that allows for script injection in the web application.