CVEvulnerability
CVE-2012-5920
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-11-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Google Web Toolkit (GWT) 2.4 through 2.5 Final, as used in JBoss Operations Network (ON) 3.1.1 and possibly other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2012-4563.
Affected configurations
• google web toolkit 2.4
• google web toolkit 2.4.0
• google web toolkit 2.5.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://rhn.redhat.com/errata/RHSA-2013-0187.html rhn.redhat.com
- http://www.openwall.com/lists/oss-security/2012/10/31/1 www.openwall.com
- http://www.securityfocus.com/bid/57538 www.securityfocus.com
- https://developers.google.com/web-toolkit/release-notes#Release_Notes_2_4_0 developers.google.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80331 exchange.xforce.ibmcloud.com
- http://rhn.redhat.com/errata/RHSA-2013-0187.html rhn.redhat.com
- http://www.openwall.com/lists/oss-security/2012/10/31/1 www.openwall.com
- http://www.securityfocus.com/bid/57538 www.securityfocus.com
- https://developers.google.com/web-toolkit/release-notes#Release_Notes_2_4_0 developers.google.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80331 exchange.xforce.ibmcloud.com