CVEvulnerability
CVE-2011-2644
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-08-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an RPM info display.
Affected configurations
• marcus schafer kiwi (<= 3.74.1)
• novell suse studio onsite 1.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00013.html lists.opensuse.org
- http://support.novell.com/security/cve/CVE-2011-2644.html support.novell.com
- http://www.securityfocus.com/bid/49236 www.securityfocus.com
- https://bugzilla.novell.com/show_bug.cgi?id=700591 bugzilla.novell.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69279 exchange.xforce.ibmcloud.com
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00013.html lists.opensuse.org
- http://support.novell.com/security/cve/CVE-2011-2644.html support.novell.com
- http://www.securityfocus.com/bid/49236 www.securityfocus.com
- https://bugzilla.novell.com/show_bug.cgi?id=700591 bugzilla.novell.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69279 exchange.xforce.ibmcloud.com