Secunia
Login
|
|
CVE Reference: CVE-2012-2401 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2012-2401 |
|
|
Description: Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables scripting regardless of the domain from which the SWF content was loaded, which allows remote attackers to bypass the Same Origin Policy via crafted content. |
|
|
CVE Status: Candidate |
|
|
References: SAID Secunia Advisory: SA49138 DEBIAN http://www.debian.org/security/2012/dsa-2470 CONFIRM http://core.trac.wordpress.org/browser/branches/3.3/wp-includes/js/plupload?rev=20487 http://core.trac.wordpress.org/browser/branches/3.3/wp-includes/js/plupload/changelog.txt?rev=20487 http://wordpress.org/news/2012/04/wordpress-3-3-2/ |
|
| Return to the previous page. |
