CVEvulnerability
CVE-2012-4451
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-01-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified input to (1) Debug, (2) Feed\PubSubHubbub, (3) Log\Formatter\Xml, (4) Tag\Cloud\Decorator, (5) Uri, (6) View\Helper\HeadStyle, (7) View\Helper\Navigation\Sitemap, or (8) View\Helper\Placeholder\Container\AbstractStandalone, related to Escaper.
Affected configurations
• zend zend framework (< 2.0.1)
• fedoraproject fedora 16
• fedoraproject fedora 17
• redhat enterprise linux 6.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://framework.zend.com/security/advisory/ZF2012-03 Vendor Advisory
- http://seclists.org/oss-sec/2012/q3/571 Mailing List, Patch, Third Party Advisory
- http://seclists.org/oss-sec/2012/q3/573 Mailing List, Patch, Third Party Advisory
- http://www.securityfocus.com/bid/55636 Third Party Advisory, VDB Entry
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688946#10 Mailing List, Third Party Advisory
- https://bugs.gentoo.org/show_bug.cgi?id=436210 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=860738 Issue Tracking, Patch, Third Party Advisory
- https://github.com/zendframework/zf2/commit/27131ca9520bdf1d4c774c71459eba32f2b10733 Patch, Third Party Advisory
- http://framework.zend.com/security/advisory/ZF2012-03 Vendor Advisory
- http://seclists.org/oss-sec/2012/q3/571 Mailing List, Patch, Third Party Advisory
- http://seclists.org/oss-sec/2012/q3/573 Mailing List, Patch, Third Party Advisory
- http://www.securityfocus.com/bid/55636 Third Party Advisory, VDB Entry
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688946#10 Mailing List, Third Party Advisory
- https://bugs.gentoo.org/show_bug.cgi?id=436210 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=860738 Issue Tracking, Patch, Third Party Advisory
- https://github.com/zendframework/zf2/commit/27131ca9520bdf1d4c774c71459eba32f2b10733 Patch, Third Party Advisory