{"api_version":"1","generated_at":"2026-07-23T10:39:53+00:00","cve":"CVE-2012-1215","urls":{"html":"https://cve.report/CVE-2012-1215","api":"https://cve.report/api/cve/CVE-2012-1215.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2012-1215","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-1215"},"summary":{"title":"CVE-2012-1215","description":"Cross-site scripting (XSS) vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allows remote attackers to inject arbitrary web script or HTML via the create field in a \"Create a group\" action.","state":"PUBLISHED","assigner":"mitre","published_at":"2012-02-21 13:31:21","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://packetstormsecurity.org/files/109617/#comment-10344","name":"http://packetstormsecurity.org/files/109617/#comment-10344","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Yoono Firefox 7.7.0 Cross Site Scripting ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://packetstormsecurity.org/files/109617/Yoono-Firefox-7.7.0-Cross-Site-Scripting.html","name":"http://packetstormsecurity.org/files/109617/Yoono-Firefox-7.7.0-Cross-Site-Scripting.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Yoono Firefox 7.7.0 Cross Site Scripting ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://support.yoono.com/yoono/topics/xss-w35in","name":"http://support.yoono.com/yoono/topics/xss-w35in","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73150","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73150","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/51970","name":"http://www.securityfocus.com/bid/51970","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Yoono Extension 'create' Field HTML Injection Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-1215","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-1215","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2012","cve_id":"1215","vulnerable":"1","versionEndIncluding":"7.7.7","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"yoono","cpe5":"yoono_for_firefox","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T18:53:36.295Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.org/files/109617/Yoono-Firefox-7.7.0-Cross-Site-Scripting.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.yoono.com/yoono/topics/xss-w35in"},{"name":"51970","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/51970"},{"name":"yoonofirefoxextension-addfriends-xss(73150)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73150"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.org/files/109617/#comment-10344"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2012-02-10T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allows remote attackers to inject arbitrary web script or HTML via the create field in a \"Create a group\" action."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.org/files/109617/Yoono-Firefox-7.7.0-Cross-Site-Scripting.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://support.yoono.com/yoono/topics/xss-w35in"},{"name":"51970","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/51970"},{"name":"yoonofirefoxextension-addfriends-xss(73150)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73150"},{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.org/files/109617/#comment-10344"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2012-1215","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allows remote attackers to inject arbitrary web script or HTML via the create field in a \"Create a group\" action."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://packetstormsecurity.org/files/109617/Yoono-Firefox-7.7.0-Cross-Site-Scripting.html","refsource":"MISC","url":"http://packetstormsecurity.org/files/109617/Yoono-Firefox-7.7.0-Cross-Site-Scripting.html"},{"name":"http://support.yoono.com/yoono/topics/xss-w35in","refsource":"CONFIRM","url":"http://support.yoono.com/yoono/topics/xss-w35in"},{"name":"51970","refsource":"BID","url":"http://www.securityfocus.com/bid/51970"},{"name":"yoonofirefoxextension-addfriends-xss(73150)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73150"},{"name":"http://packetstormsecurity.org/files/109617/#comment-10344","refsource":"MISC","url":"http://packetstormsecurity.org/files/109617/#comment-10344"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2012-1215","datePublished":"2012-02-20T20:00:00.000Z","dateReserved":"2012-02-20T00:00:00.000Z","dateUpdated":"2024-08-06T18:53:36.295Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2012-02-21 13:31:21","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yoono:yoono_for_firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"7.7.7","matchCriteriaId":"5DF2D4F7-8F4C-4CC8-AF40-7E0E54C8ECB9"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2012","CveId":"1215","Ordinal":"1","Title":"CVE-2012-1215","CVE":"CVE-2012-1215","Year":"2012"},"notes":[{"CveYear":"2012","CveId":"1215","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allows remote attackers to inject arbitrary web script or HTML via the create field in a \"Create a group\" action.","Type":"Description","Title":"CVE-2012-1215"},{"CveYear":"2012","CveId":"1215","Ordinal":"2","NoteData":"2012-02-20","Type":"Other","Title":"Published"},{"CveYear":"2012","CveId":"1215","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}