Vulnerability Description
Cross-site scripting (XSS) vulnerability in the GWT Mobile PhoneGap Showcase application for Android allows remote attackers to inject arbitrary web script or HTML via a crafted Bluetooth Device Name field.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gwt Mobile Phonegap Showcase Project | Gwt Mobile Phonegap Showcase | 1.6 |
Related Weaknesses (CWE)
References
- http://arxiv.org/abs/1410.7756
- http://arxiv.org/pdf/1410.7756v1.pdfExploit
- http://arxiv.org/abs/1410.7756
- http://arxiv.org/pdf/1410.7756v1.pdfExploit
FAQ
What is CVE-2014-8671?
CVE-2014-8671 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Cross-site scripting (XSS) vulnerability in the GWT Mobile PhoneGap Showcase application for Android allows remote attackers to inject arbitrary web script or HTML via a crafted Bluetooth Device Name ...
How severe is CVE-2014-8671?
CVE-2014-8671 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-8671?
Check the references section above for vendor advisories and patch information. Affected products include: Gwt Mobile Phonegap Showcase Project Gwt Mobile Phonegap Showcase.