CVE-2014-7850

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2014-7850

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2014-7850.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2014-7850

Downstream

DEBIAN-CVE-2014-7850

UBUNTU-CVE-2014-7850

Published

2014-11-28T15:59:01Z

Modified

2025-08-09T20:01:26Z

Summary

[none]

Details

Cross-site scripting (XSS) vulnerability in the Web UI in FreeIPA 4.x before 4.1.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to breadcrumb navigation.

References

http://lists.fedoraproject.org/pipermail/package-announce/2014-November/144848.html
https://bugzilla.redhat.com/show_bug.cgi?id=1165280
https://fedorahosted.org/freeipa/ticket/4742

CVE-2014-7850

Affected packages