DEBIAN-CVE-2014-3877
- Source
- https://security-tracker.debian.org/tracker/CVE-2014-3877
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2014-3877.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2014-3877
- Upstream
- Downstream
- Published
- 2014-06-18T14:55:12Z
- Modified
- 2026-09-01T20:03:21Z
- Summary
- [none]
- Details
-
Incomplete blacklist vulnerability in Frams' Fast File EXchange (F*EX, aka fex) before fex-20140530 allows remote attackers to conduct cross-site scripting (XSS) attacks via the addto parameter to fup.
- References
Affected packages
Debian:12 / fex
Package
- Name
- fex
- Purl
- pkg:deb/debian/fex?arch=source&distro=bookworm
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed20140530-1
Affected versions
Other
20110601-1
20110608-1
20110608-2
20110610-1
20110610-2
20110620-1
20110622-1
20110726-1~bpo60+1
20110726-1
20111129-1
20111129-2
20120215-1
20120215-2
20120215-3~bpo60+1
20120215-3
20120718-1
20120718-2
20120718-3
20120718-4
20120718-5
20120930-1
20121027-1
20121107-1~bpo60+1
20121107-1
20130217-1
20130510-1
20130805-1
20140226-1
20140313-1
Debian:13 / fex
Package
- Name
- fex
- Purl
- pkg:deb/debian/fex?arch=source&distro=trixie
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed20140530-1
Affected versions
Other
20110601-1
20110608-1
20110608-2
20110610-1
20110610-2
20110620-1
20110622-1
20110726-1~bpo60+1
20110726-1
20111129-1
20111129-2
20120215-1
20120215-2
20120215-3~bpo60+1
20120215-3
20120718-1
20120718-2
20120718-3
20120718-4
20120718-5
20120930-1
20121027-1
20121107-1~bpo60+1
20121107-1
20130217-1
20130510-1
20130805-1
20140226-1
20140313-1