CVE-2012-4533
published 2012-11-19CVE-2012-4533: Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource._get_row function in lib/viewvc.py in ViewVC 1.0.x before 1.0.13 and 1.1.x…
PriorityP421medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
3.08%
86.4th percentile
Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource._get_row function in lib/viewvc.py in ViewVC 1.0.x before 1.0.13 and 1.1.x before 1.1.16 allows remote authenticated users with repository commit access to inject arbitrary web script or HTML via the "function name" line.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| viewvc | viewvc | >= 0 < 1.1.5-1.4 | 1.1.5-1.4 |
| viewvc | viewvc | >= 1.0.0 < 1.0.13 | 1.0.13 |
| viewvc | viewvc | >= 1.1.0 < 1.1.16 | 1.1.16 |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6cx5-w8wc-hcvh: Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource
ghsa_unreviewed·2022-05-14
CVE-2012-4533 [MEDIUM] CWE-79 GHSA-6cx5-w8wc-hcvh: Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource
Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource._get_row function in lib/viewvc.py in ViewVC 1.0.x before 1.0.13 and 1.1.x before 1.1.16 allows remote authenticated users with repository commit access to inject arbitrary web script or HTML via the "function name" line.
OSV
CVE-2012-4533: Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource
osv·2012-11-19·CVSS 4.3
CVE-2012-4533 [MEDIUM] CVE-2012-4533: Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource
Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource._get_row function in lib/viewvc.py in ViewVC 1.0.x before 1.0.13 and 1.1.x before 1.1.16 allows remote authenticated users with repository commit access to inject arbitrary web script or HTML via the "function name" line.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2012-4533 viewvc 1.1.5 lib/viewvc.py XSS [epel-all]
bugzilla·2012-10-21·CVSS 4.3
CVE-2012-4533 [MEDIUM] CVE-2012-4533 viewvc 1.1.5 lib/viewvc.py XSS [epel-all]
CVE-2012-4533 viewvc 1.1.5 lib/viewvc.py XSS [epel-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Please note: this issue affects multiple sup
Bugzilla
CVE-2012-4533 viewvc 1.1.5 lib/viewvc.py XSS [fedora-all]
bugzilla·2012-10-21·CVSS 4.3
CVE-2012-4533 [MEDIUM] CVE-2012-4533 viewvc 1.1.5 lib/viewvc.py XSS [fedora-all]
CVE-2012-4533 viewvc 1.1.5 lib/viewvc.py XSS [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Please note: this issue affects multiple suppor
Bugzilla
CVE-2012-4533 viewvc: lib/viewvc.py XSS
bugzilla·2012-10-21·CVSS 4.3
CVE-2012-4533 [MEDIUM] CVE-2012-4533 viewvc: lib/viewvc.py XSS
CVE-2012-4533 viewvc: lib/viewvc.py XSS
From Nicolás Alvarez :
Package: viewvc
Version: 1.1.5-1.3
Severity: important
Tags: security
There is an XSS bug in the diff view, exploitable by people with commit
access to the repository. The "function name" lines returned by diff (in
the diff lines starting with @@) are not HTML-escaped.
Here's an example. Add this file to a SVN repository:
blah
x alert("XSS!");
one context
two context
three context
trigger
Commit it. Next, change the line labeled 'trigger', and commit again.
The diff produced by the second commit is:
@@ -3,4 +3,4 @@ x alert("XSS!");
one context
two context
three context
-trigger
+trigger X
When telling ViewVC to show the diff of that file for the last commit,
it doesn't HTML-escape the , so it gets executed.
I'm attachi
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=691062http://osvdb.org/86566http://secunia.com/advisories/51041http://secunia.com/advisories/51072http://viewvc.tigris.org/issues/show_bug.cgi?id=515http://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/tags/1.0.13/CHANGEShttp://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/tags/1.1.16/CHANGEShttp://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2792http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2794http://www.debian.org/security/2012/dsa-2563http://www.mandriva.com/security/advisories?name=MDVSA-2013:134http://www.openwall.com/lists/oss-security/2012/10/21/2http://www.openwall.com/lists/oss-security/2012/10/21/3http://www.securityfocus.com/bid/56161https://exchange.xforce.ibmcloud.com/vulnerabilities/79561https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0313http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=691062http://osvdb.org/86566http://secunia.com/advisories/51041http://secunia.com/advisories/51072http://viewvc.tigris.org/issues/show_bug.cgi?id=515http://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/tags/1.0.13/CHANGEShttp://viewvc.tigris.org/source/browse/%2Acheckout%2A/viewvc/tags/1.1.16/CHANGEShttp://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2792http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2794http://www.debian.org/security/2012/dsa-2563http://www.mandriva.com/security/advisories?name=MDVSA-2013:134http://www.openwall.com/lists/oss-security/2012/10/21/2http://www.openwall.com/lists/oss-security/2012/10/21/3http://www.securityfocus.com/bid/56161https://exchange.xforce.ibmcloud.com/vulnerabilities/79561https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0313
2012-11-19
Published