PT-2012-6272
CVE-2012-6369
·
تاريخ النشر
2012-12-28
·
تاريخ التحديث
2020-01-22
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
1Password version 3.9.9
Description
A cross-site scripting (XSS) issue exists in the Troubleshooting Reporting System feature. This could allow remote attackers to inject arbitrary web script or HTML via a crafted
User-Agent HTTP header that is not properly handled in a View Troubleshooting Report action.Recommendations
For version 3.9.9, consider disabling the Troubleshooting Reporting System feature until a patch is available. Restrict access to the View Troubleshooting Report action to minimize the risk of exploitation. Avoid using crafted User-Agent HTTP headers in the affected system until the issue is resolved.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾