CVE-2015-1773 Cross-site scripting (XSS) vulnerability in asdoc/templates/index.html in Apache Flex before 4.14.1 allows remote attackers to inject arbitrary web script or HTML by providing a crafted URI to JavaScr...
MediumCVSS 4.3
EPSS 7.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in asdoc/templates/index.html in Apache Flex before 4.14.1 allows remote attackers to inject arbitrary web script or HTML by providing a crafted URI to JavaScript code generated by the asdoc component.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache flex | <= 4.14.0 | No fix listed |
References
- 20150407 CVE-2015-1773 Apache Flex reflected XSS vulnerability mailing-list
- 73954 vdb-entry
- 1032107 vdb-entry
- helpx.adobe.com