Home→Descriptions→SA48975
| Secunia ID | |
| Release Date |
27 Apr 2012 |
| Criticality | |
| Solution Status |
Vendor Patch |
| Where | |
| Impact |
Cross-Site ScriptingCross-Site Scripting vulnerabilities allow a third party to manipulate the content or behaviour of a web application in a user's browser, without compromising the underlying system. Different Cross-Site Scripting related vulnerabilities are also classified under this category, including "script insertion" and "cross-site request forgery". Cross-Site Scripting vulnerabilities are often used against specific users of a website to steal their credentials or to conduct spoofing attacks. |
| Description |
Debian has issued an update for spip. This fixes some vulnerabilities, which can be exploited by malicious people to conduct cross-site scripting attacks. For more information: |
| Solution |
Apply updated packages via the apt-get package manager. |
| Original Advisory |
DSA-2461-1: |