Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2016-10245: Insufficient sanitization of the query parameter in templates/html/search_opensearch.php could lead to reflected cross-site scripting or iframe injection. 1714190: CVE-2016-10245 doxygen: cross-site scripting in templates/html/search_opensearch.php
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | doxygen | 1:1.8.5-4.amzn2 |
| Amazon Linux · 2 | doxygen-debuginfo | 1:1.8.5-4.amzn2 |
| Amazon Linux · 2 | doxygen-doxywizard | 1:1.8.5-4.amzn2 |
| Amazon Linux · 2 | doxygen-latex | 1:1.8.5-4.amzn2 |
Vulnerabilities 1
-
Unscored —
Insufficient sanitization of the query parameter in templates/html/search_opensearch.php could lead to reflected cross-…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2016-10245.html