CVE-2015-1159

4.3

MEDIUMCVSS v2

Published

June 26, 2015

Affected

2 projects

Assigned by

[email protected]

Severity scale

010

Description

Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/.

apple/cups

GitHubApple CUPS Sources

<= 2.0.2NVD

OpenPrinting/cups

GitHubOpenPrinting CUPS Sources

<= 2.0.2NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2015-1159

Description

More on this CVE