CVE-2014-1869 Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.swf in ZeroClipboard before 1.3.2, as maintained by Jon Rohan and James M. Greene, allow remote attackers to inject arbitrary web s...
MediumCVSS 4.3
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.swf in ZeroClipboard before 1.3.2, as maintained by Jon Rohan and James M. Greene, allow remote attackers to inject arbitrary web script or HTML via vectors related to certain SWF query parameters (aka loaderInfo.parameters).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/db4o(Ubuntu:22.04) | All versions | No fix listed |
| debian/db4o(Debian:12) | All versions | No fix listed |
| debian/db4o(Debian:12) | = 8.0.184.15484+dfsg2-3.1 | No fix listed |
| redhat openshift | <= 3.1 | No fix listed |
| zeroclipboard project zeroclipboard | <= 1.3.1 | No fix listed |
| zeroclipboard project zeroclipboard | = 1.0.5 | No fix listed |
| zeroclipboard project zeroclipboard | = 1.0.7 | No fix listed |
| zeroclipboard project zeroclipboard | = 1.0.8 | No fix listed |
| zeroclipboard project zeroclipboard | = 1.1.0 | No fix listed |
| zeroclipboard project zeroclipboard | = 1.1.1 | No fix listed |
| zeroclipboard project zeroclipboard | = 1.1.2 | No fix listed |
| zeroclipboard project zeroclipboard | = 1.1.3 | No fix listed |
| zeroclipboard project zeroclipboard | = 1.1.4 | No fix listed |
| zeroclipboard project zeroclipboard | = 1.1.5 | No fix listed |
| zeroclipboard project zeroclipboard | = 1.1.6 | No fix listed |
| zeroclipboard project zeroclipboard | = 1.1.7 | No fix listed |
| zeroclipboard project zeroclipboard | = 1.2.0 | No fix listed |
| zeroclipboard project zeroclipboard | = 1.2.1 | No fix listed |
| zeroclipboard project zeroclipboard | = 1.2.2 | No fix listed |
| zeroclipboard project zeroclipboard | = 1.2.3 | No fix listed |
| zeroclipboard project zeroclipboard | = 1.3.0 | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2014-1869 vendor-advisory
- 56821 third-party-advisory
- 65484 vdb-entry
- RHSA-2016:0070 vendor-advisory
- zeroclipboard-cve20141869-xss(91085) vdb-entry
- github.com
- github.com
- github.com patch vendor-advisory
- wiki.jenkins-ci.org