| Title | Transmission の Web クライアントにおけるクロスサイトスクリプティングの脆弱性 |
|---|---|
| Summary | Transmission の Web クライアントには、クロスサイトスクリプティングの脆弱性が存在します。 |
| Possible impacts | 第三者により、torrent ファイル内の (1) comment、(2) created by、および (3) name フィールドを介して、任意の Web スクリプトまたは HTML を挿入される可能性があります。 |
| Solution | ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date | July 19, 2012, midnight |
| Registration Date | Aug. 20, 2012, 12:05 p.m. |
| Last Update | June 2, 2014, 6:07 p.m. |
| CVSS2.0 : 注意 | |
| Score | 2.6 |
|---|---|
| Vector | AV:N/AC:H/Au:N/C:N/I:P/A:N |
| Transmission Project |
| Transmission 2.61 未満 |
| No | Changed Details | Date of change |
|---|---|---|
| 0 | [2012年08月20日] 掲載 [2012年11月09日] ベンダ情報：Ubuntu (USN-1584-1) を追加 [2014年06月02日] ベンダ情報：オラクル (CVE-2012-4037 XSS vulnerability in Transmission) を追加 |
Feb. 17, 2018, 10:37 a.m. |
| Summary | Multiple cross-site scripting (XSS) vulnerabilities in the web client in Transmission before 2.61 allow remote attackers to inject arbitrary web script or HTML via the (1) comment, (2) created by, or (3) name field in a torrent file. |
|---|---|
| Publication Date | Aug. 16, 2012, 5:55 a.m. |
| Registration Date | Jan. 28, 2021, 3:02 p.m. |
| Last Update | Nov. 21, 2024, 10:42 a.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:a:transmissionbt:transmission:0.91:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.51:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.81:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.21:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.04:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:0.6.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:0.70:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:*:*:*:*:*:*:*:* | 2.60 | ||||
| cpe:2.3:a:transmissionbt:transmission:0.81:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.11:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.22:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.32:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.73:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.04:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.83:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.21:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:0.92:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:0.72:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.75:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.93:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.02:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.02:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.40:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.80:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:0.6:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.41:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.72:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.90:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.52:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.41:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:0.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.05:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.12:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.92:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.01:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:0.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.13:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.20:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:0.95:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.10:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.50:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.91:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.33:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.76:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.74:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.20:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.30:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.30:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.42:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:0.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:0.94:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:0.80:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.70:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.53:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:0.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.33:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:0.82:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.61:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.31:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.32:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.03:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.77:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.54:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.50:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.00:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.82:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.03:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.00:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:0.96:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.42:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:0.93:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.71:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.31:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.22:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.01:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:0.71:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:0.90:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.34:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.51:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.11:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.40:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:0.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.60:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.10:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:1.06:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:transmissionbt:transmission:2.52:*:*:*:*:*:*:* | |||||