CVE-2014-2856
Beschrijving NL
Cross-site scripting (XSS) kwetsbaarheid in scheduler/client.c in Common Unix Printing System (CUPS) vóór 1.7.2 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via het URL-pad, gerelateerd aan de is_path_absolute functie.
Origineel (Engels) tonen
Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, related to the is_path_absolute function.