Unscored CVE-2012-5307 EUVD-2012-5230GHSA-qx7w-4g5c-frh7

Cross-site scripting (XSS) vulnerability in servlet/traveler in IBM Lotus Notes Traveler before 8.5.3.3 Interim Fix 1, when Firefox is used…

Published Oct 8, 2012 · Updated Sep 16, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in servlet/traveler in IBM Lotus Notes Traveler before 8.5.3.3 Interim Fix 1, when Firefox is used, allows remote attackers to inject arbitrary web script or HTML via the redirectURL parameter, a different vulnerability than CVE-2012-4824 and CVE-2012-4825.

References

20121001 BF, XSS, CSRF and Redirector vulnerabilities in IBM Lotus Notes Traveler mailing-list