Candidate: CVE-2012-2237
PublicDate: 2019-12-17 18:15:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2237
Description:
 Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before
 1.4.3 and 1.5.x before 1.5.2 allow remote attackers to inject arbitrary web
 script or HTML via vectors related to (1) javascript innerHTML as used when
 generating login forms, (2) links or (3) resources URLs, and (4) the
 Display name in a user profile.
Ubuntu-Description:
Notes:
 sbeattie> 1009777 may be 1.5.x only, others affect all versions
Bugs:
 https://bugs.launchpad.net/mahara/+bug/1009784
 https://bugs.launchpad.net/mahara/+bug/1009774
 https://bugs.launchpad.net/mahara/+bug/1009777
Priority: low
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N [6.1 MEDIUM]

Patches_mahara:
 debian: http://anonscm.debian.org/gitweb/?p=collab-maint/mahara.git;a=commit;h=c9a049a7138a50df8bcafb82e4cd1ab4a4401d0d
upstream_mahara: released (1.5.1-2)
hardy_mahara: DNE
lucid_mahara: ignored (reached end-of-life)
natty_mahara: ignored (reached end-of-life)
oneiric_mahara: ignored (reached end-of-life)
precise_mahara: ignored (reached end-of-life)
precise/esm_mahara: DNE (precise was needed)
quantal_mahara: not-affected (1.5.1-2)
raring_mahara: not-affected (1.5.1-2)
saucy_mahara: not-affected (1.5.1-2)
trusty_mahara: DNE
trusty/esm_mahara: DNE
utopic_mahara: DNE
vivid_mahara: DNE
vivid/stable-phone-overlay_mahara: DNE
vivid/ubuntu-core_mahara: DNE
wily_mahara: DNE
xenial_mahara: DNE
yakkety_mahara: DNE
zesty_mahara: DNE
devel_mahara: DNE