---
cve: "CVE-2012-6133"
severity: "LOW"
cvss: 3.1
epss: "1.6%"
vendor: "Roundup"
kev: false
exploited: false
published: "2020-01-30 20:22:09"
tags: [cve, security, low]
source: tsecurity.de CVE-Dossier
exported: "2026-09-10T08:42:36+02:00"
---

# CVE-2012-6133

> 3.1 LOW

## Beschreibung

Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML via the (1) @ok_message or (2) @error_message parameter to issue*.

## Referenzen

- <https://pypi.python.org/pypi/roundup/1.4.20>
- <http://issues.roundup-tracker.org/issue2550724>
- <http://www.openwall.com/lists/oss-security/2012/11/10/2>
- <http://www.openwall.com/lists/oss-security/2013/02/13/8>
- <https://bugzilla.redhat.com/show_bug.cgi?id=722672>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2012-6133) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_