Cross-site Scripting Vulnerability in Common Unix Printing System (CUPS)
CVE-2014-2856

Currently unrated

Key Information:

Vendor

Apple
Status
Cups
Vendor
CVE Published:
18 April 2014

What is CVE-2014-2856?

A cross-site scripting vulnerability exists in the Common Unix Printing System (CUPS) before version 1.7.2. This flaw allows remote attackers to inject arbitrary web scripts or HTML through the URL path by exploiting the is_path_absolute function, potentially compromising the security of affected systems. Organizations relying on CUPS should upgrade to the latest version to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://secunia.com/advisories/57880
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/66788
vdb-entryx_refsource_BID
http://www.ubuntu.com/usn/USN-2172-1
vendor-advisoryx_refsource_UBUNTU

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.