Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/.
CVSS Details
- CVSS 3.1 Base Score: 6.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cups | Aug 30, 2017 | Jun 26, 2015 |
| Apple Osx Adminframework | — | Apply OS X security update 2015-004Upgrade macOS to the latest version | Aug 28, 2015 | Jun 26, 2015 |
| Apple Osx Cups | — | Upgrade macOS to the latest version | Mar 29, 2016 | Jun 26, 2015 |
| Centos_linux | — | Upgrade cups-libsUpgrade cups-filesystemUpgrade cups-clientUpgrade cups-ipptoolUpgrade cupsUpgrade cups-phpUpgrade cups-develUpgrade cups-lpd | Dec 1, 2016 | Jun 26, 2015 |
| Debian | — | Upgrade cups | Jul 30, 2024 | Jun 26, 2015 |
| Freebsd | — | Upgrade cups-base | Dec 10, 2025 | Jun 9, 2015 |
| Gentoo Linux | — | Upgrade net-print/cups. | Oct 30, 2017 | Jun 26, 2015 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Jun 26, 2015 |
| Oracle_linux | — | Upgrade cups-filesystemUpgrade cups-phpUpgrade cups-clientUpgrade cups-ipptoolUpgrade cups-libsUpgrade cups-develUpgrade cups-lpdUpgrade cups | Oct 16, 2024 | Jun 26, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 10, 2015 |
| Suse | — | Upgrade cups-clientUpgrade libcupsppdc1Upgrade cups-libsUpgrade cups154Upgrade cups-ddkUpgrade libcupscgi1Upgrade cups-configUpgrade libcups2-32bitUpgrade cups-develUpgrade libcupsmime1Upgrade cups-libs-32bitUpgrade cupsUpgrade cups154-clientUpgrade cups154-filtersUpgrade libcups2Upgrade cups154-libsUpgrade libcupsimage2 | Dec 18, 2015 | Jun 11, 2015 |
| Ubuntu | — | Upgrade cups | Nov 8, 2024 | Jun 26, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub