CVE-2014-3877

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2014-3877
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2014-3877.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2014-3877
Related
Published
2014-06-18T14:55:12Z
Modified
2025-01-14T06:05:59.050617Z
Summary
[none]
Details

Incomplete blacklist vulnerability in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allows remote attackers to conduct cross-site scripting (XSS) attacks via the addto parameter to fup.

References

Affected packages

Debian:11 / fex

Package

Name
fex
Purl
pkg:deb/debian/fex?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20140530-1

Affected versions

Other

20110601-1
20110608-1
20110608-2
20110610-1
20110610-2
20110620-1
20110622-1
20110726-1~bpo60+1
20110726-1
20111129-1
20111129-2
20120215-1
20120215-2
20120215-3~bpo60+1
20120215-3
20120718-1
20120718-2
20120718-3
20120718-4
20120718-5
20120930-1
20121027-1
20121107-1~bpo60+1
20121107-1
20130217-1
20130510-1
20130805-1
20140226-1
20140313-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / fex

Package

Name
fex
Purl
pkg:deb/debian/fex?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20140530-1

Affected versions

Other

20110601-1
20110608-1
20110608-2
20110610-1
20110610-2
20110620-1
20110622-1
20110726-1~bpo60+1
20110726-1
20111129-1
20111129-2
20120215-1
20120215-2
20120215-3~bpo60+1
20120215-3
20120718-1
20120718-2
20120718-3
20120718-4
20120718-5
20120930-1
20121027-1
20121107-1~bpo60+1
20121107-1
20130217-1
20130510-1
20130805-1
20140226-1
20140313-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / fex

Package

Name
fex
Purl
pkg:deb/debian/fex?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20140530-1

Affected versions

Other

20110601-1
20110608-1
20110608-2
20110610-1
20110610-2
20110620-1
20110622-1
20110726-1~bpo60+1
20110726-1
20111129-1
20111129-2
20120215-1
20120215-2
20120215-3~bpo60+1
20120215-3
20120718-1
20120718-2
20120718-3
20120718-4
20120718-5
20120930-1
20121027-1
20121107-1~bpo60+1
20121107-1
20130217-1
20130510-1
20130805-1
20140226-1
20140313-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}