Unscored severity · published Apr 2, 2013
CVE-2012-6550
Cross-site scripting (XSS) vulnerability in ZeroClipboard before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via "the clipText returned from the flash…
–
CVSS
4.5%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in ZeroClipboard before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via "the clipText returned from the flash object," a different vulnerability than CVE-2013-1808.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.5% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ZE
Zeroclipboard · Zeroclipboard Project
through 1.0.7; 1.0.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-6550
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-6550
seclists.org
http://seclists.org/fulldisclosure/2013/Feb/103
github.com
https://github.com/jonrohan/ZeroClipboard/blob/master/docs/releases.md#zeroclipboard-114
github.com
https://github.com/jonrohan/ZeroClipboard/commit/51b67b6d696f62aaf003210c08542588222c4913
More from Zeroclipboard
–
CVE-2014-1869
Multiple cross-site scripting (XSS) vulnerabilities in ZeroClipboard.swf in ZeroClipboard before 1.3.2, as maintained by Jon Rohan and James M
–
CVE-2013-1808
Cross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in ZeroClipboard before 1.0.8, as used in em-shorty, RepRapCalculator, Fulcrum, Django, aCMS,…