CVE-2011-2771

Publication date 15 November 2011

Last updated 24 July 2024


Ubuntu priority

Description

Multiple cross-site scripting (XSS) vulnerabilities in Mahara before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) URI attributes and (2) the External Feed component, as demonstrated by the guid element in an RSS feed.

Status

Package Ubuntu Release Status
mahara 11.10 oneiric
Fixed 1.4.0-1ubuntu0.1
11.04 natty
Fixed 1.2.7-1ubuntu0.2
10.10 maverick
Fixed 1.2.5-2ubuntu0.3
10.04 LTS lucid
Fixed 1.2.4-1ubuntu0.4
8.04 LTS hardy Not in release

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
mahara