CVE-2012-6369

Cross-site scripting (XSS) vulnerability in the Troubleshooting Reporting System feature in AgileBits 1Password 3.9.9 might allow remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header that is not properly handled in a View Troubleshooting Report action.

Score
CVSS 2.0 4.3 Medium
Status
Modified - cve@mitre.org
Published
2012-12-28
Last modified
2024-09-17
Weaknesses
CWE-79

Affected products

References

 
 
© AVABIS GmbH privacypolicy about