CVE-2012-0891

https://notcve.org/view.php?id=CVE-2012-0891

Multiple cross-site scripting (XSS) vulnerabilities in Puppet Dashboard 1.0 before 1.2.5 and Enterprise 1.0 before 1.2.5 and 2.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified fields. Múltiples vulnerabilidades de XSS en Puppet Dashboard 1.0 anterior a 1.2.5 y Enterprise 1.0 anterior a 1.2.5 y 2.x anterior a 2.0.1 permiten a atacantes remotos inyectar script Web o HTML arbitrarios a través de campos no especificados. • http://puppetlabs.com/security/cve/cve-2012-0891 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •