REDHAT-BUG-812045: XSS
First published: Thu Apr 12 2012(Updated: )
It was reported [1] that some low-risk XSS flaws that are limited to the administration area were found in Gallery 3.x and 2.x. In addition, some unspecified possible encryption-related flaws were also reported. These issues have been corrected in Gallery 2.3.2 and 3.0.3. [1] <a href="http://gallery.menalto.com/gallery_3_0_3_and_gallery_2_3_2">http://gallery.menalto.com/gallery_3_0_3_and_gallery_2_3_2</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NotFound Gallery | >2.0<=2.3.1>3.0<=3.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://gallery.menalto.com/gallery_3_0_3_and_gallery_2_3_2
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=812048
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=812050
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=812049
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=812045#c0
- https://access.redhat.com/security/cve/CVE-2012-2405
- https://access.redhat.com/security/cve/CVE-2012-1113
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2405
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=812045
- https://bugzilla.redhat.com/show_bug.cgi?id=812045
Frequently Asked Questions
What is the severity of REDHAT-BUG-812045?
The severity of REDHAT-BUG-812045 is classified as low risk due to the XSS flaws being limited to the administration area.
How do I fix REDHAT-BUG-812045?
To fix REDHAT-BUG-812045, you should upgrade to Gallery version 2.3.2 or 3.0.3.
What types of vulnerabilities are reported in REDHAT-BUG-812045?
REDHAT-BUG-812045 reports low-risk XSS vulnerabilities and unspecified encryption-related flaws.
Which versions of Gallery are affected by REDHAT-BUG-812045?
Gallery versions 2.0 to 2.3.1 and 3.0 to 3.0.2 are affected by REDHAT-BUG-812045.
Is there a security patch for REDHAT-BUG-812045?
Yes, the vulnerabilities in REDHAT-BUG-812045 have been patched in Gallery versions 2.3.2 and 3.0.3.
- agent/references
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2012-1113
- agent/severity
- agent/weakness
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/gallery
- canonical/notfound gallery