CVE-2012-0040
Published Jan 24, 2012
Last updated 7 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in modules/core/www/no_cookie.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTML via the retryURL parameter.
- Source
- secalert@redhat.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:simplesamlphp:simplesamlphp:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "215F31CA-AF25-4B02-8ED3-05A7B777EE96",
"versionEndIncluding": "1.8.1"
},
{
"criteria": "cpe:2.3:a:simplesamlphp:simplesamlphp:0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3846F91-E2A3-4B26-8652-E7EA0C022FC6"
},
{
"criteria": "cpe:2.3:a:simplesamlphp:simplesamlphp:0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7584CBE6-7DC3-4FA5-84A1-2E8F7BE95BAD"
},
{
"criteria": "cpe:2.3:a:simplesamlphp:simplesamlphp:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13D6ECC5-8099-4295-9F99-C58C086AB3EC"
},
{
"criteria": "cpe:2.3:a:simplesamlphp:simplesamlphp:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F3DFD825-218E-4C43-AF88-1B5B29E0EE8B"
},
{
"criteria": "cpe:2.3:a:simplesamlphp:simplesamlphp:1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83373F11-392B-4612-8A42-0458FC5BA962"
},
{
"criteria": "cpe:2.3:a:simplesamlphp:simplesamlphp:1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C399539-2F52-4FE0-9346-F10523883D39"
},
{
"criteria": "cpe:2.3:a:simplesamlphp:simplesamlphp:1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4F13703-C112-4CEB-9F33-6D9208C2A964"
},
{
"criteria": "cpe:2.3:a:simplesamlphp:simplesamlphp:1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D20C5AA5-1F69-4292-AE89-93CB6C576610"
},
{
"criteria": "cpe:2.3:a:simplesamlphp:simplesamlphp:1.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFDBBD51-2C37-4794-99EC-B0F4D593B265"
},
{
"criteria": "cpe:2.3:a:simplesamlphp:simplesamlphp:1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF276BD9-F1D4-4884-81A5-A0DCBBCDD406"
},
{
"criteria": "cpe:2.3:a:simplesamlphp:simplesamlphp:1.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1270958-2486-4C92-9CE8-F5F2296C48C8"
},
{
"criteria": "cpe:2.3:a:simplesamlphp:simplesamlphp:1.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8589F79D-44C7-46CD-8156-D597345BEC50"
},
{
"criteria": "cpe:2.3:a:simplesamlphp:simplesamlphp:1.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA079F64-F3A6-4259-93AB-86650EA4A8DB"
},
{
"criteria": "cpe:2.3:a:simplesamlphp:simplesamlphp:1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "48924CA3-0D28-45CC-BD89-7BD87D70709E"
},
{
"criteria": "cpe:2.3:a:simplesamlphp:simplesamlphp:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94E825B8-F4B4-4DF6-81B7-A4A85E8A7CBE"
}
],
"operator": "OR"
}
]
}
]