Description
Cross-site scripting (XSS) vulnerability in asdoc/templates/index.html in Apache Flex before 4.14.1 allows remote attackers to inject arbitrary web script or HTML by providing a crafted URI to JavaScript code generated by the asdoc component.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | flex | No fix yet | — |
References
- 20150407 CVE-2015-1773 Apache Flex reflected XSS vulnerability mailing-list
- 73954 vdb-entry
- https://helpx.adobe.com/security/products/flex/apsb15-08.html
- 1032107 vdb-entry