VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 14, 2014· Updated Jun 16, 2026

CVE-2012-0891

CVE-2012-0891

Description

Multiple cross-site scripting (XSS) vulnerabilities in Puppet Dashboard 1.0 before 1.2.5 and Enterprise 1.0 before 1.2.5 and 2.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified fields.

Affected products

15
  • Puppet (software)/Puppet Dashboard11 versions
    cpe:2.3:a:puppet:puppet_dashboard:1.0.0:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:puppet:puppet_dashboard:1.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:puppet:puppet_dashboard:1.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:puppet:puppet_dashboard:1.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:puppet:puppet_dashboard:1.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:puppet:puppet_dashboard:1.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:puppet:puppet_dashboard:1.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:puppet:puppet_dashboard:1.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:puppet:puppet_dashboard:1.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:puppet:puppet_dashboard:1.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:puppet:puppet_dashboard:1.2.4:*:*:*:*:*:*:*
    • (no CPE)range: <1.2.5
  • Puppet (software)/Puppet Enterprise4 versions
    cpe:2.3:a:puppet:puppet_enterprise:1.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:puppet:puppet_enterprise:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:puppet:puppet_enterprise:1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:puppet:puppet_enterprise:1.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:puppet:puppet_enterprise:2.0.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.