Skip to content
OpenAdvisories
Medium RHSA-2012:0151 2 CVEs

Red Hat Security Advisory: conga security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Rhel Cluster 5 rhel_cluster:5 conga 0:0.12.2-51.el5
Red Hat · Rhel Cluster 5 rhel_cluster:5 conga-debuginfo 0:0.12.2-51.el5
Red Hat · Rhel Cluster 5 rhel_cluster:5 luci 0:0.12.2-51.el5
Red Hat · Rhel Cluster 5 rhel_cluster:5 ricci 0:0.12.2-51.el5

Vulnerabilities 2

  • Medium 6.1
    CVE-2011-1948

    Cross-site scripting in Products.CMFPlone and Products.PasswordResetTool

    Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

    plone products-cmfplone products-passwordresettool PyPI
  • Medium —
    CVE-2010-1104

    Moderate severity vulnerability that affects Zope2

    Cross-site scripting (XSS) vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messag…

    zope2 PyPI

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=577019
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=711494
  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=723188
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=755935
  • article
    https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/5.8_Technical_Notes/conga.html#RHSA-2012-0151
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=755941
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0151.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-1104
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1104
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1104
  • report
    https://access.redhat.com/security/cve/CVE-2011-1948
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1948
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1948