Jease Multiple Cross-Site Scripting Vulnerabilities

Bugtraq ID:	55048
Class:	Input Validation Error
CVE:	CVE-2012-4052
Remote:	Yes
Local:	No
Published:	Aug 16 2012 12:00AM
Updated:	Aug 16 2012 12:00AM
Credit:	High-Tech Bridge
Vulnerable:
Not Vulnerable:

Jease Multiple Cross-Site Scripting Vulnerabilities

Jease is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Jease versions prior to 2.9 are vulnerable.

Jease Multiple Cross-Site Scripting Vulnerabilities

Attackers can use a browser to exploit these issues.

Jease Multiple Cross-Site Scripting Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Jease Multiple Cross-Site Scripting Vulnerabilities

References:

• jease Homepage (jease)
  
• HTB23104 : (CVE-2012-4052) Cross-Site Scripting (XSS) in Jease (High-Tech Bridge)