CVE-2012-0891 Multiple cross-site scripting (XSS) vulnerabilities in Puppet Dashboard 1.0 before 1.2.5 and Enterprise 1.0 before 1.2.5 and 2.x before 2.0.1 allow remote attackers to inject arbitrary web script or H...
MediumCVSS 4.3
EPSS 0.94%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Puppet Dashboard 1.0 before 1.2.5 and Enterprise 1.0 before 1.2.5 and 2.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified fields.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| puppet dashboard | = 1.0.0 | No fix listed |
| puppet dashboard | = 1.0.3 | No fix listed |
| puppet dashboard | = 1.0.4 | No fix listed |
| puppet dashboard | = 1.1.0 | No fix listed |
| puppet dashboard | = 1.1.1 | No fix listed |
| puppet dashboard | = 1.2.0 | No fix listed |
| puppet dashboard | = 1.2.1 | No fix listed |
| puppet dashboard | = 1.2.2 | No fix listed |
| puppet dashboard | = 1.2.3 | No fix listed |
| puppet dashboard | = 1.2.4 | No fix listed |
| puppet enterprise | = 1.0 | No fix listed |
| puppet enterprise | = 1.1 | No fix listed |
| puppet enterprise | = 1.2.0 | No fix listed |
| puppet enterprise | = 2.0.0 | No fix listed |
References
- puppetlabs.com vendor-advisory