CVE-2012-1007 Common Vulnerabilities and Exposures

Upstream information

CVE-2012-1007 at MITRE

Description

Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 1.3.10 allow remote attackers to inject arbitrary web script or HTML via (1) the name parameter to struts-examples/upload/upload-submit.do, or the message parameter to (2) struts-cookbook/processSimple.do or (3) struts-cookbook/processDyna.do.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores
	National Vulnerability Database
Base Score	4.3
Vector	AV:N/AC:M/Au:N/C:N/I:P/A:N
Access Vector	Network
Access Complexity	Medium
Authentication	None
Confidentiality Impact	None
Integrity Impact	Partial
Availability Impact	None

SUSE Bugzilla entry: 745796 [VERIFIED / INVALID]

SUSE Security Advisories:

TID7021433, published Sat Mar 3 09:45:57 UTC 2018

SUSE Timeline for this CVE

CVE page created: Fri Jun 28 12:27:53 2013
CVE page last modified: Fri Oct 7 12:46:13 2022