CVE-2014-1869 — Cross-site Scripting in Project Zeroclipboard

CWE-79 — Cross-site Scripting8 documents8 sources
Severity
4.3MEDIUMNVD
EPSS
0.6%
top 30.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Redhat OpenshiftZeroclipboard Project Zeroclipboard
Timeline
PublishedFeb 8
Latest updateMay 17

Description

Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.swf in ZeroClipboard before 1.3.2, as maintained by Jon Rohan and James M. Greene, allow remote attackers to inject arbitrary web script or HTML via vectors related to certain SWF query parameters (aka loaderInfo.parameters).

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-5ghv-fx7f-qq8j: Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard↗2022-05-17
▶
CVEList
CVE-2014-1869: Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard↗2014-02-08
▶
OSV
CVE-2014-1869: Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard↗2014-02-08
▶

📋Vendor Advisories

3
Jenkins
Jenkins Security Advisory 2014-10-01↗2014-10-01
▶
Red Hat
stapler-adjunct-zeroclipboard: multiple cross-site scripting (XSS) flaws↗2014-01-31
▶
Debian
CVE-2014-1869: db4o - Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.swf in Zero...↗2014
▶

💬Community

1
Bugzilla
CVE-2014-1869 stapler-adjunct-zeroclipboard: multiple cross-site scripting (XSS) flaws↗2014-02-10
▶
CVE-2014-1869 — Cross-site Scripting | cvebase