CVE-2012-4533

no score yetEPSS 3.1%

Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource._get_row function in lib/viewvc.py in ViewVC 1.0.x before 1.0.13 and 1.1.x before 1.1.16 allows remote authenticated users with repository commit access to inject arbitrary web script or HTML via the "function name" line.

EPSS: 3.1% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2012-11-19
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

debian:debian_linux
viewvc:viewvc

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=691062
http://osvdb.org/86566
http://secunia.com/advisories/51041
http://secunia.com/advisories/51072
http://viewvc.tigris.org/issues/show_bug.cgi?id=515

Check your stack JSON