CERTA-2008-AVI-130
Vulnerability from certfr_avis
Une vulnérabilité dans Sun Java Server Faces permet à un individu malveillant d'effectuer une injection de code indirecte à distance.
Description
Sun Java Server Faces est un utilitaire de développement d'interfaces d'applications pour Sun JavaServer. Une vulnérabilité dans le contrôle de certaines entrées permet à un individu malveillant d'effectuer une injection de code indirecte dans le navigateur de la victime.
Solution
Se référer au bulletin de sécurité Sun #233561 pour l'obtention des correctifs (cf. section Documentation).
Sun Java Server Faces (JSF) 1.x.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cP\u003eSun Java Server Faces (JSF) 1.x.\u003c/P\u003e",
"content": "## Description\n\nSun Java Server Faces est un utilitaire de d\u00e9veloppement d\u0027interfaces\nd\u0027applications pour Sun JavaServer. Une vuln\u00e9rabilit\u00e9 dans le contr\u00f4le\nde certaines entr\u00e9es permet \u00e0 un individu malveillant d\u0027effectuer une\ninjection de code indirecte dans le navigateur de la victime.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 Sun \\#233561 pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2008-1285",
"url": "https://www.cve.org/CVERecord?id=CVE-2008-1285"
}
],
"initial_release_date": "2008-03-13T00:00:00",
"last_revision_date": "2008-03-13T00:00:00",
"links": [],
"reference": "CERTA-2008-AVI-130",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2008-03-13T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 dans Sun Java Server Faces permet \u00e0 un individu\nmalveillant d\u0027effectuer une injection de code indirecte \u00e0 distance.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans Sun Java Server Faces",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Sun #233561 du 27 f\u00e9vrier 2008",
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-233561-1"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…