CVE-2014-2856

Published: Apr 18, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, related to the is_path_absolute function.

Affected (111)

Products: Apple: Cups

Apple

1 product

Cups

Configuration A

111 vulnerable

Vulnerable Software	Affected Versions
Apple Cups	Up to 1.7.1
Apple Cups	Version 1.1.10-1
Apple Cups	Version 1.1.10
Apple Cups	Version 1.1.11
Apple Cups	Version 1.1.12
Apple Cups	Version 1.1.13
Apple Cups	Version 1.1.14
Apple Cups	Version 1.1.15
Apple Cups	Version 1.1.16
Apple Cups	Version 1.1.17
Apple Cups	Version 1.1.18
Apple Cups	Version 1.1.19
Apple Cups	Version 1.1.19 rc1
Apple Cups	Version 1.1.19 rc2
Apple Cups	Version 1.1.19 rc3
Apple Cups	Version 1.1.19 rc4
Apple Cups	Version 1.1.19 rc5
Apple Cups	Version 1.1.1
Apple Cups	Version 1.1.20
Apple Cups	Version 1.1.20 rc1
Apple Cups	Version 1.1.20 rc2
Apple Cups	Version 1.1.20 rc3
Apple Cups	Version 1.1.20 rc4
Apple Cups	Version 1.1.20 rc5
Apple Cups	Version 1.1.20 rc6
Apple Cups	Version 1.1.21
Apple Cups	Version 1.1.21 rc1
Apple Cups	Version 1.1.21 rc2
Apple Cups	Version 1.1.22
Apple Cups	Version 1.1.22 rc1
Apple Cups	Version 1.1.22 rc2
Apple Cups	Version 1.1.23
Apple Cups	Version 1.1.23 rc1
Apple Cups	Version 1.1.2
Apple Cups	Version 1.1.3
Apple Cups	Version 1.1.4
Apple Cups	Version 1.1.5-1
Apple Cups	Version 1.1.5-2
Apple Cups	Version 1.1.5
Apple Cups	Version 1.1.6-1
Apple Cups	Version 1.1.6-2
Apple Cups	Version 1.1.6-3
Apple Cups	Version 1.1.6
Apple Cups	Version 1.1.7
Apple Cups	Version 1.1.8
Apple Cups	Version 1.1.9-1
Apple Cups	Version 1.1.9
Apple Cups	Version 1.1
Apple Cups	Version 1.2.0
Apple Cups	Version 1.2.10
Apple Cups	Version 1.2.11
Apple Cups	Version 1.2.12
Apple Cups	Version 1.2.1
Apple Cups	Version 1.2.2
Apple Cups	Version 1.2.3
Apple Cups	Version 1.2.4
Apple Cups	Version 1.2.5
Apple Cups	Version 1.2.6
Apple Cups	Version 1.2.7
Apple Cups	Version 1.2.8
Apple Cups	Version 1.2.9
Apple Cups	Version 1.2 b1
Apple Cups	Version 1.2 b2
Apple Cups	Version 1.2 rc1
Apple Cups	Version 1.2 rc2
Apple Cups	Version 1.2 rc3
Apple Cups	Version 1.3.0
Apple Cups	Version 1.3.10
Apple Cups	Version 1.3.11
Apple Cups	Version 1.3.1
Apple Cups	Version 1.3.2
Apple Cups	Version 1.3.3
Apple Cups	Version 1.3.4
Apple Cups	Version 1.3.5
Apple Cups	Version 1.3.6
Apple Cups	Version 1.3.7
Apple Cups	Version 1.3.8
Apple Cups	Version 1.3.9
Apple Cups	Version 1.3 b1
Apple Cups	Version 1.3 rc1
Apple Cups	Version 1.3 rc2
Apple Cups	Version 1.4.0
Apple Cups	Version 1.4.1
Apple Cups	Version 1.4.2
Apple Cups	Version 1.4.3
Apple Cups	Version 1.4.4
Apple Cups	Version 1.4.5
Apple Cups	Version 1.4.6
Apple Cups	Version 1.4.7
Apple Cups	Version 1.4.8
Apple Cups	Version 1.4 b1
Apple Cups	Version 1.4 b2
Apple Cups	Version 1.4 b3
Apple Cups	Version 1.4 rc1
Apple Cups	Version 1.5.0
Apple Cups	Version 1.5.1
Apple Cups	Version 1.5.2
Apple Cups	Version 1.5.3
Apple Cups	Version 1.5.4
Apple Cups	Version 1.5 b1
Apple Cups	Version 1.5 b2
Apple Cups	Version 1.5 rc1
Apple Cups	Version 1.6.1
Apple Cups	Version 1.6.2
Apple Cups	Version 1.6.3
Apple Cups	Version 1.6.4
Apple Cups	Version 1.6 b1
Apple Cups	Version 1.6 rc1
Apple Cups	Version 1.7.0
Apple Cups	Version 1.7.1 b1
Apple Cups	Version 1.7 rc1