Beaker CVE-2015-3162 HTML Injection Vulnerability

Bugtraq ID:	74568
Class:	Input Validation Error
CVE:	CVE-2015-3162
Remote:	Yes
Local:	No
Published:	May 07 2015 12:00AM
Updated:	May 07 2015 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Beaker Project Beaker 0.18 Beaker Project Beaker 0.17 Beaker Project Beaker 0.16 Beaker Project Beaker 0.15 Beaker Project Beaker 0.14 Beaker Project Beaker 0.13 Beaker Project Beaker 0.12 Beaker Project Beaker 0.11 Beaker Project Beaker 0.10 Beaker Project Beaker 0.9 Beaker Project Beaker 0.8 Beaker Project Beaker 0.7 Beaker Project Beaker 0.6 Beaker Project Beaker 20.0 Beaker Project Beaker 19.0 Beaker Project Beaker 1.0
Not Vulnerable:	Beaker Project Beaker 20.1

Beaker CVE-2015-3162 HTML Injection Vulnerability

Beaker is prone to an HTML-injection vulnerability.

Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user. Other attacks are also possible.

Beaker CVE-2015-3162 HTML Injection Vulnerability

References:

• Beaker Homepage (Beaker Project)
  
• Bug 1215030 - (CVE-2015-3162) HTML tags in recipe set comments are not escaped i (Red Hat Bugzilla)
  
• What�??s New in Beaker 20? (Beaker Project)