Red Hat Security AdvisoryRHSA-2020:1034
doxygen security and bug fix update
Released 2020-03-31 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) doxygen-1:1.8.5-4.el7, doxygen-doxywizard-1:1.8.5-4.el7, doxygen-latex-1:1.8.5-4.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) doxygen-1:1.8.5-4.el7, doxygen-doxywizard-1:1.8.5-4.el7, doxygen-latex-1:1.8.5-4.el7
- Red Hat Enterprise Linux Server (v. 7) doxygen-1:1.8.5-4.el7
- Red Hat Enterprise Linux Server Optional (v. 7) doxygen-doxywizard-1:1.8.5-4.el7, doxygen-latex-1:1.8.5-4.el7
- Red Hat Enterprise Linux Workstation (v. 7) doxygen-1:1.8.5-4.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) doxygen-doxywizard-1:1.8.5-4.el7, doxygen-latex-1:1.8.5-4.el7
Fixes 1 record
Priority LOW 31
Insufficient sanitization of the query parameter in templates/html/search_opensearch.php could lead to reflected cross-site scripting or iframe injection.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01823 · Published 2019-05-24 · Fixed CWE-79
